Beyond good ol’ Run key, Part 140 December 30, 2022 in Autostart (Persistence)... 2022-12-31 07:29:4 | 阅读: 23 | 收藏 | Hexacorn - www.hexacorn.com ol autostart oldie abused

How to be a good quitter? It is now. It is happening. You have finally submitted your resignation letter and y... 2022-12-15 08:12:54 | 阅读: 16 | 收藏 | Hexacorn - www.hexacorn.com employment dates electronic quit rsu

Marrying client-side Windows-based CryptEncrypt and server-side,Linux-based Crypt::OpenSSL::RSA Marrying client-side Windows-based CryptEncrypt and s... 2022-12-10 06:51:12 | 阅读: 21 | 收藏 | Hexacorn - www.hexacorn.com client windows googling crypt

The Future of SOC December 8, 2022 in Incident Response, SOC,... 2022-12-9 07:32:52 | 阅读: 23 | 收藏 | Hexacorn - www.hexacorn.com triage security regulated aas regional

Using make_sc_hash_db.py to create API hashing DBs December 3, 2022 in Malware Analysis... 2022-12-4 06:43:3 | 阅读: 28 | 收藏 | Hexacorn - www.hexacorn.com blown windows hashing analysis python

Environment… is variable December 2, 2022 in Archaeology, Living off... 2022-12-3 07:15:0 | 阅读: 37 | 收藏 | Hexacorn - www.hexacorn.com vc librarypath vscmd spectre

Cracking Zeppelin November 19, 2022 in Factorization, ransomwa... 2022-11-20 07:29:55 | 阅读: 38 | 收藏 | www.hexacorn.com ransomware beat cracking zeppelin unlikely

Beyond good ol’ Run key, Part 139 November 19, 2022 in Autostart (Persistence)... 2022-11-20 06:53:9 | 阅读: 19 | 收藏 | www.hexacorn.com dm diagnostic library clsid curious

Dealing with alert fatigue, Part 2 October 8, 2022 in SOC... 2022-10-9 05:49:42 | 阅读: 29 | 收藏 | www.hexacorn.com fidelity senior junior security analysis

Dealing with alert fatigue, Part 1 Gazillion tickets, gazillion emails a day. The business as usual for most SOCs…It ac... 2022-10-2 07:43:3 | 阅读: 14 | 收藏 | www.hexacorn.com ticketing distinctive literally fatigue stupid

Inserting data into other processes’ address space, part 1a September 21, 2022 in Code Injection, Reusig... 2022-9-22 06:5:59 | 阅读: 21 | 收藏 | www.hexacorn.com nvifr genuine exchange nvidia inter

Adobe: JSX and JSXBIN files September 2, 2022 in Autostart (Persistence)... 2022-9-3 06:21:24 | 阅读: 32 | 收藏 | www.hexacorn.com network autostart jsxbin debugger

What to know, what to learn? What are useful skills for cyber in 2022? ~12 years ago I felt I am on the top of the (blue side of cyber) world. I knew Windo... 2022-8-20 07:41:31 | 阅读: 41 | 收藏 | www.hexacorn.com security analysis truly okay

Password as a (Yara) Service August 19, 2022 in Archaeology, Clustering... 2022-8-20 05:43:1 | 阅读: 46 | 收藏 | www.hexacorn.com clustering kinda encryption 3333

Week of Data Dumps, Part 7 – registry August 6, 2022 in Archaeology, Clustering, F... 2022-8-7 04:57:45 | 阅读: 33 | 收藏 | www.hexacorn.com artifacts oriented carvey regripper

Week of Data Dumps, Part 6 – file names August 5, 2022 in Archaeology, Clustering, F... 2022-8-6 04:45:52 | 阅读: 35 | 收藏 | www.hexacorn.com mess detective clustering breadcrumbs locking

Week of Data Dumps, Part 5 – commands July 31, 2022 in Archaeology, Clustering, Fi... 2022-8-1 02:40:47 | 阅读: 34 | 收藏 | www.hexacorn.com tendency openly obsolete coders sandboxing

Week of Data Dumps, Part 4 – games-related strings July 30, 2022 in Archaeology, Clustering, Fi... 2022-7-31 04:51:59 | 阅读: 38 | 收藏 | www.hexacorn.com intuitive microsoft artifacts sick 3rd

Week of Data Dumps, Part 3 – service names July 23, 2022 in Archaeology, Clustering, Fi... 2022-7-24 01:16:33 | 阅读: 37 | 收藏 | www.hexacorn.com windows collecting islands archaeology clustering

The curse of being ‘technical’ July 22, 2022 in Preaching... 2022-7-23 06:12:23 | 阅读: 28 | 收藏 | www.hexacorn.com disruptor toolssees improves hood