Stacking is one of the most powerfull hunting techniques. See a short primer below.
DFIR120 – The power of Stacking
Month: December 2018
DFIR120 – NTFS Timestamps
The first episode of DFIR in 120 seconds covers NTFS timestamps. They are frequently misinterpreted even by seasoned security professionals.
Macro Malware Again
In this post I’ll describe an approach on how to leverage Excel to dump dynamically created Shellcode from a Macro. I’m always looking for new challenges for our team that they can solve in slow times. During my research I stumbled upon a nice sample in @0xffff0800 malware archive (Find […]