aMus(ing)Notification January 3, 2021 in Archaeology, LOLBins, Und... 2021-01-04 08:31:56 | 阅读: 248 | 收藏 | www.hexacorn.com dialog invocations toast

handle..ing SHAllocShared December 25, 2020 in Code Injection... 2020-12-26 08:53:14 | 阅读: 272 | 收藏 | www.hexacorn.com memory shlwapi relies

Beyond Fear Beyond FearDecember 22, 2020 in Preaching... 2020-12-22 09:50:25 | 阅读: 269 | 收藏 | www.hexacorn.com fear programmers genius

Propagate, Ribbonate December 22, 2020 in Anti-Forensics, Code In... 2020-12-22 09:09:18 | 阅读: 294 | 收藏 | www.hexacorn.com hwnd windows analysis injection

FaaS for noobs This is the first version of this article. Due to nuances, and things I forgot while wri... 2020-12-06 09:53:07 | 阅读: 278 | 收藏 | www.hexacorn.com faas ec2 python regions spot

csrss.exe and its manifests This is yet another odd behavior I spotted using Procmon. I was curious what .manifest f... 2020-12-06 08:23:39 | 阅读: 277 | 收藏 | www.hexacorn.com windows microsoft manifestc mui syswow64

TestHooks, take 2 December 2, 2020 in Archaeology... 2020-12-03 08:20:43 | 阅读: 350 | 收藏 | www.hexacorn.com windows microsoft software testhook 0gtweet

Re-sauce, Part 3 I like extracting data from many samples because this way I often discover new things. C... 2020-11-28 07:36:56 | 阅读: 328 | 收藏 | www.hexacorn.com microsoft msdn urn library

Updated appid_calc.pl & dexray.pl November 26, 2020 in appid_calc.pl, DeXRAY,... 2020-11-27 07:56:24 | 阅读: 343 | 收藏 | www.hexacorn.com appid dexray download stuart pinged

Commander Minority Report November 21, 2020 in Random ideas... 2020-11-21 09:55:24 | 阅读: 335 | 收藏 | www.hexacorn.com emerged spoofing intricacies sysmon 4688

Re-sauce, Part 2 Re-sauce, Part 2November 18, 2020 in Archaeo... 2020-11-19 08:19:12 | 阅读: 362 | 收藏 | www.hexacorn.com idd fontidd curiosity digging ntopen

DeXRAY 2.25 update November 17, 2020 in DeXRAY, Software Releas... 2020-11-18 04:05:55 | 阅读: 347 | 收藏 | www.hexacorn.com dexray symantec microsoft d3 bitdefender

DeXRAY 2.24 update November 16, 2020 in DeXRAY, Software Releas... 2020-11-17 07:54:29 | 阅读: 318 | 收藏 | www.hexacorn.com symantec dexray k7 qtn bdq

When good URLs are bad for business November 15, 2020 in Forensic Analysis, Inci... 2020-11-16 02:54:05 | 阅读: 318 | 收藏 | www.hexacorn.com analysis repository memory xhtml1 juicy

Memory buffers for… initiated, part 3 – Frida(y) edition November 14, 2020 in Frida, Malware Analysis... 2020-11-14 09:06:01 | 阅读: 334 | 收藏 | www.hexacorn.com buffers pafish createfilew stuck inject

Where all the Cyber Tooth Fairies go? November 13, 2020 in Preaching... 2020-11-14 08:31:27 | 阅读: 315 | 收藏 | www.hexacorn.com security killer tooth dexter hear

Memory buffers for… initiated, part 2 – Frida(y) edition November 12, 2020 in Frida, Malware Analysis... 2020-11-13 07:44:01 | 阅读: 294 | 收藏 | www.hexacorn.com buffers memory rtlfreeheap 1mb

DeXRAY 2.23 update November 10, 2020 in DeXRAY, Software Releas... 2020-11-11 08:20:22 | 阅读: 296 | 收藏 | www.hexacorn.com dexray symantec d3 microsoft bdq

Memory buffers for… initiated November 4, 2020 in Reversing, Sandboxing... 2020-11-05 08:28:11 | 阅读: 276 | 收藏 | www.hexacorn.com memory buffers knew analysis killed

The Alexiou Principle October 29, 2020 in Forensic Analysis, Preac... 2020-10-30 08:49:00 | 阅读: 358 | 收藏 | www.hexacorn.com dfir alexiou principle republish mantra