Detect Mach-O binaries with YARA.
Category: forensics
100 Days of YARA – Day 1: Basics
Getting started with YARA.
YARA Rules Index
YARA Rules Index
Malicious LNK Files
Malicious LNK files.
picoCTF 2019 shark on wire 2 Writeup
picoCTF 2019 shark on the wire 2 Writeup
picoCTF 2019 shark on wire 1 Writeup
picoCTF 2019 shark on wire 1 Writeup
picoCTF WebNet1 Writeup
picoCTF 2019 WebNet1 Writeup
picoCTF 2019 WebNet0 Writeup
picoCTF 2019 WebNet0 Writeup
Get-ChildItem Performance
I was writing some PowerShell scripts to scan disks for certain types of malware and realized that Get-ChildItem was kind of slow. I googled around and found this site which demonstrated using robocopy.exe and dir as faster alternatives to Get-ChildItem. Here were the results I had searching for LNK files on my disk using both …
Installing OLE Tools on Windows
Installing OLE Tools on Windows
Finding Processes With Suspicious CWD Using procfs
Find malware running from temporary directories using procfs.
Finding Masquerading Processes With procfs
Find masquerading processes using procfs.
DMFR SECURITY 