Malicious LNK files.
All about cron persistence
REVIEW: RED TEAM Operator: Malware Development Intermediate Course by SEKTOR7 Institute.
REVIEW: RED TEAM Operator: Windows Evasion Course by SEKTOR7 Institute.
Enumerate modules with CreateToolhelp32Snapshot.
I use CyberChef daily for malware analysis, programming, and CTF challenges. Installing CyberChef locally can be handy for general privacy and OPSEC reasons. A local installation also works without internet connectivity. The main drawback of using CyberChef locally is that sharing recipes and data you have decoded with your teammates isn't as straightforward as copying …
Quick and dirty example of process enumeration using CreateToolhelp32Snapshot
Quick example of using WTSEnumerateProcesses to enumerate processes running on a Windows machine.
Find malware running from temporary directories using procfs.
Find masquerading processes using procfs.
Toggle Safe Browsing in Google Chrome.
Accessing Alternate Data Streams on VMDK Images on Linux.