Outer Web | Explore

/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.

You are here		thinkdfir.com I can see and hear you seeing and hearing me! - ThinkDFIR
\|	\|	pentestlab.blog November 13, 2019 - Penetration Testing Lab	3.6 parsecs away Travel
\|	\|	1 post published by Administrator on November 13, 2019	3.6 parsecs away Travel
\|	\|	www.khyrenz.com Updated again! Automated USB artefact parsing from the Registry and Event Log	3.1 parsecs away Travel
\|	\|	Let me start by saying that, yes: many tools already exist to parse information out of the Windows Registry and/or the Event Log. However, while I was conducting my own tool validation processes (see https://github.com/khyrenz/tool_validation), I realised that very few tools parse this information out and automatically populate the kind of table that I would be adding into my forensic report.So... I did a bit of R&D, and I present to you a Python script that does just that; creatively named pars	3.1 parsecs away Travel
\|	\|	www.binaryspiral.com vCloud Director Failing to Customize Windows 2008 Server - Binaryspiral	2.6 parsecs away Travel
\|	\|	This evening I got an urgent email from a colleague that just got the rug pulled out from under him. His customer decided that the two web servers on the front end of a SharePoint farm he was build...	2.6 parsecs away Travel
\|	\|	passing-the-hash.blogspot.com Still Passing the Hash 15 Years Later: *NIX Kerberos + MS Active Directory fun and games	24.9 parsecs away Travel
\|		So one of my favorite techniques on the Windows side is to use what Benjamin Delpy (@gentilkiwi) called 'overpass the hash' to get a legit K...	24.9 parsecs away Travel