Mitre Att&ck – from JSON to CSV June 14, 2023 in Mitre Att&ck, Software Rele... 2023-6-15 07:21:58 | 阅读: 25 | 收藏 | Hexacorn - www.hexacorn.com converting crime beautifiers analysis software

Perl and Python Scripting Templates… One of the most important (basic) technical skills in cybersecurity are:Knowing Exce... 2023-6-10 07:33:10 | 阅读: 24 | 收藏 | Hexacorn - www.hexacorn.com python perl dirty spit admit

This LOLBIN doesn’t exist… June 7, 2023 in LOLBins... 2023-6-8 05:54:4 | 阅读: 19 | 收藏 | Hexacorn - www.hexacorn.com winamp rundll32 rundll

Analyzing nested, obfuscated PHP files… Many PHP webshells are encrypted, encoded, obfuscated in many different ways, but most u... 2023-6-4 06:7:18 | 阅读: 31 | 收藏 | Hexacorn - www.hexacorn.com php nf decoded webshells sg

Analysing PS2EXE executables… June 1, 2023 in Malware Analysis... 2023-6-2 06:52:56 | 阅读: 29 | 收藏 | Hexacorn - www.hexacorn.com ps2exe powershell recognize heavily aim

DeXRAY, DFIR, and the art of ambulance chasing… Pretty much all of my DeXRAY posts ever published been focusing on new versions of this... 2023-5-24 06:56:8 | 阅读: 18 | 收藏 | Hexacorn - www.hexacorn.com security refers quarantined software dfir

Blue teaming – it’s DATa complicated… May 17, 2023 in Security Logs... 2023-5-18 06:57:44 | 阅读: 19 | 收藏 | Hexacorn - www.hexacorn.com encodings security perl logsaws guardduty

Da Li’L World of DLL Exports and Entry Points, Part 6 May 12, 2023 in Archaeology, DLL Analysis... 2023-5-13 06:50:39 | 阅读: 29 | 收藏 | Hexacorn - www.hexacorn.com rundll32 malicious combos gegl software

Matlab persistent lolbin – 2 years too late, but always… May 12, 2023 in Autostart (Persistence), LOL... 2023-5-13 05:35:49 | 阅读: 26 | 收藏 | Hexacorn - www.hexacorn.com matlab library mexw64 lolbins twit

PE Section names – re-visited, again, in 2023 May 11, 2023 in Reversing, Windows 11... 2023-5-12 07:16:10 | 阅读: 24 | 收藏 | Hexacorn - www.hexacorn.com 3109 rdata 00cfg bbt cipolicy

An Elf walks into the bar… May 11, 2023 in Windows 11... 2023-5-12 06:29:20 | 阅读: 16 | 收藏 | Hexacorn - www.hexacorn.com windows advapi32 ndr suggests

Malware – some musings about the meaning of the word… May 5, 2023 in Preaching... 2023-5-6 07:23:12 | 阅读: 19 | 收藏 | Hexacorn - www.hexacorn.com software malicious harm cia undesirable

Threat Hunting – architecture issues… May 4, 2023 in ARM, threat hunting... 2023-5-5 07:23:19 | 阅读: 22 | 收藏 | Hexacorn - www.hexacorn.com windows yup gonna kinda software

Using Detect It Easy to… detect it easy I love Detect It Easy. It’s my go-to tool when it comes to triaging malicious samples an... 2023-4-22 07:49:48 | 阅读: 29 | 收藏 | Hexacorn - www.hexacorn.com upx upxed analysis memory reversing

The words that go adapataadadapata April 20, 2023 in Silly... 2023-4-21 06:46:15 | 阅读: 20 | 收藏 | Hexacorn - www.hexacorn.com letter shocked longest combing

Beyond good ol’ Run key, Part 142 April 14, 2023 in Autostart (Persistence)... 2023-4-15 05:47:41 | 阅读: 23 | 收藏 | Hexacorn - www.hexacorn.com obs liking learnt heard tinkering

The words that go (.)[a-z]\1[a-z]\1[a-z]\1[a-z]\1[a-z]\1 April 1, 2023 in Silly... 2023-4-2 06:56:2 | 阅读: 21 | 收藏 | Hexacorn - www.hexacorn.com stupid silly amongst letters dad

Converting questionable questions into unquestionable opportunities… Social media are full of questions that are formulated in a passive, passive-aggressive,... 2023-3-29 06:14:5 | 阅读: 16 | 收藏 | Hexacorn - www.hexacorn.com degree reversing promote security

List of clean mutexes and mutants A few years ago I released a list of ‘bad’ mutexes/mutants. That list was generated from... 2023-3-12 08:3:36 | 阅读: 31 | 收藏 | Hexacorn - www.hexacorn.com windows dllwindows syswow64 mutex exewindows

Threat Hunting – localization issues March 10, 2023 in threat hunting... 2023-3-11 07:47:21 | 阅读: 29 | 收藏 | Hexacorn - www.hexacorn.com l10n acronyms suddenly i18n t9n