December 2020
27
Zeus malware. Packet capture analysis with Wireshark
No Comments
I analyze a PCAP file that was captured on a machine infected with the Zeus malware.
December 2020
23
Endpoint Live Forensics from the Command Line on Linux
In this blog post, I will provide an introduction of how to do live forensics on a Linux machine by using default command line tools.
December 2020
20
Threat Hunting via Windows Event Logs with DeepBlueCLI
In this blog post, I will use the PowerShell module DeepBlueCLI to quickly discover suspicious account and command line behavior by parsing some sample evtx files from DeepBlueCLI GitHub page.
December 2020
19
Endpoint Live Forensics from the Command Line on Windows
In this blog post, I will provide an introduction of how to do live forensics on a Windows machine by using default command line tools.