Accessing Alternate Data Streams on VMDK Images on Linux.
Category: malware
REVIEW: Malware Data Science – Attack Detection and Attribution
Review of Malware Data Science: Attack Detection and Attribution
REVIEW: RED TEAM Operator: Windows Persistence Course by SEKTOR7 Institute
My review of SEKTOR7 Institute's Red Team Operator, Windows Persistence course.
Windows Startup Folders
Windows Startup Folder locations.
Volatility Notes
Some notes and links related to the Volatility Framework
Volatility on Ubuntu 20.04
Quick and dirty way to get Volatility working on Ubuntu 20.04
Windows base64 Encoding and Decoding Using certutil
Use certutil.exe to encode and decode base64 on Windows.