Explore >> Select a destination
|
You are here 
|
www.khyrenz.com | ||
| | | | |
countuponsecurity.com
|
|
| | | | | Following our last article about the Prefetch artifacts we will now move into the Windows Registry. When conducting incident response and digital forensics on Windows operating systems one of the sources of evidence that is normally part of every investigation is the Windows Registry. The Windows Registry is an important component of the OS and... | |
| | | | |
thinkdfir.com
|
|
| | | | | In preparation for an upcoming FOR500 class I thought I would test out one of the recent additions to the class. This post by my colleague Zach shows that Win10 1903 and later has a registry key that will store the full path of any executable that utilises the computers camera or microphone. Zach shows... | |
| | | | |
port139.hatenablog.com
|
|
| | | | | ????????????????????????????????????????????????????????????????????????????????????????????????????????? RedLine??????????????PID 840???cmd.exe?????????????????MIRAgent.exe???????????????????? MIRAgent?Mandiant????????????????CMD????????????????? ?????CMD.EXE????????????????????????????????????????... | |
| | | | |
www.sonatype.com
|
|
| | | Crypto stealers are posing as IP checker utilities on npm, targeting Windows, Linux and macOS users with new open source malware campaigns. | ||
