Yet another secret of hosts file February 18, 2021 in Anti-*, Anti-Forensics,... 2021-02-19 08:41:52 | 阅读: 247 | 收藏 | www.hexacorn.com windows unicode16 dnsrslvr hostss

Misre-presentation host February 8, 2021 in Living off the land, LOL... 2021-02-09 08:34:12 | 阅读: 226 | 收藏 | www.hexacorn.com iexplore clickonce

Beyond good ol’ Run key, Part 131 February 6, 2021 in Anti-Forensics, Autostar... 2021-02-07 06:44:08 | 阅读: 256 | 收藏 | www.hexacorn.com microsoft software editorhklm mhtml editorhkcu

Desperate downloader lolbin February 5, 2021 in LOLBins... 2021-02-06 08:41:33 | 阅读: 269 | 收藏 | www.hexacorn.com msoxmled verb inetcache proxy download

Mitre Domin&trix Mitre Domin&trixFebruary 3, 2021 in Mitre At... 2021-02-04 07:56:07 | 阅读: 345 | 收藏 | www.hexacorn.com domin trix forth utopian promoted

Recoll – a perfect tool for Threat Intelligence Analysts and other Report Readers February 1, 2021 in Productivity... 2021-02-02 04:10:08 | 阅读: 237 | 收藏 | www.hexacorn.com caught docfetcher searchable hoarder tones

aMus(ing)Notification January 3, 2021 in Archaeology, LOLBins, Und... 2021-01-04 08:31:56 | 阅读: 256 | 收藏 | www.hexacorn.com dialog invocations toast

handle..ing SHAllocShared December 25, 2020 in Code Injection... 2020-12-26 08:53:14 | 阅读: 280 | 收藏 | www.hexacorn.com memory shlwapi relies

Beyond Fear Beyond FearDecember 22, 2020 in Preaching... 2020-12-22 09:50:25 | 阅读: 279 | 收藏 | www.hexacorn.com fear programmers genius

Propagate, Ribbonate December 22, 2020 in Anti-Forensics, Code In... 2020-12-22 09:09:18 | 阅读: 301 | 收藏 | www.hexacorn.com hwnd windows analysis injection

FaaS for noobs This is the first version of this article. Due to nuances, and things I forgot while wri... 2020-12-06 09:53:07 | 阅读: 285 | 收藏 | www.hexacorn.com faas ec2 python regions spot

csrss.exe and its manifests This is yet another odd behavior I spotted using Procmon. I was curious what .manifest f... 2020-12-06 08:23:39 | 阅读: 285 | 收藏 | www.hexacorn.com windows microsoft manifestc mui syswow64

TestHooks, take 2 December 2, 2020 in Archaeology... 2020-12-03 08:20:43 | 阅读: 358 | 收藏 | www.hexacorn.com windows microsoft software testhook 0gtweet

Re-sauce, Part 3 I like extracting data from many samples because this way I often discover new things. C... 2020-11-28 07:36:56 | 阅读: 336 | 收藏 | www.hexacorn.com microsoft msdn urn library

Updated appid_calc.pl & dexray.pl November 26, 2020 in appid_calc.pl, DeXRAY,... 2020-11-27 07:56:24 | 阅读: 351 | 收藏 | www.hexacorn.com appid dexray download stuart pinged

Commander Minority Report November 21, 2020 in Random ideas... 2020-11-21 09:55:24 | 阅读: 342 | 收藏 | www.hexacorn.com emerged spoofing intricacies sysmon 4688

Re-sauce, Part 2 Re-sauce, Part 2November 18, 2020 in Archaeo... 2020-11-19 08:19:12 | 阅读: 370 | 收藏 | www.hexacorn.com idd fontidd curiosity digging ntopen

DeXRAY 2.25 update November 17, 2020 in DeXRAY, Software Releas... 2020-11-18 04:05:55 | 阅读: 355 | 收藏 | www.hexacorn.com dexray symantec microsoft d3 bitdefender

DeXRAY 2.24 update November 16, 2020 in DeXRAY, Software Releas... 2020-11-17 07:54:29 | 阅读: 326 | 收藏 | www.hexacorn.com symantec dexray k7 qtn bdq

When good URLs are bad for business November 15, 2020 in Forensic Analysis, Inci... 2020-11-16 02:54:05 | 阅读: 328 | 收藏 | www.hexacorn.com analysis repository memory xhtml1 juicy