Quick and dirty example of process enumeration using CreateToolhelp32Snapshot
Enumerating Processes with WTSEnumerateProcesses
Quick example of using WTSEnumerateProcesses to enumerate processes running on a Windows machine.
picoCTF 2021 Stonks Writeup
Write-up for picoCTF 2021 Stonks.
Finding Processes With Suspicious CWD Using procfs
Find malware running from temporary directories using procfs.
Finding Masquerading Processes With procfs
Find masquerading processes using procfs.
Using procfs For Forensics and Incident Response
Using procfs For Forensics and Incident Response.
Installing evil-winrm on Ubuntu 20.04
Install evil-winrm on Ubuntu 20.04
Toggling Chrome Safe Browsing
Toggle Safe Browsing in Google Chrome.
CTF Triage Data Acquisition
A quick overview of triage data acquisition in the context of attack/defend CTFs.
Post-Exploitation With gawk
Some post exploitation techniques using gawk.
Accessing Alternate Data Streams on VMDK Images on Linux
Accessing Alternate Data Streams on VMDK Images on Linux.
REVIEW: Malware Data Science – Attack Detection and Attribution
Review of Malware Data Science: Attack Detection and Attribution
