Negative Decimal DWORD to Human Format
Introduction
Posts by Tag
- dfir 7
- windows 4
- sysadmin 3
- linux 3
- oscp 2
- offensive 2
- debug 2
- vmware 1
- bash 1
- programming 1
- reverse_engineering 1
- disk 1
- tsk 1
- mft 1
- timeline 1
- memory 1
- process 1
- malware 1
- rootkit 1
- network 1
- pcap 1
- netflow 1
- mobile 1
- verification 1
- automation 1
dfir
DFIR Playbook - Windows Forensics(WIP APR21)
Last Updated
Mobile Phone Codes
Introduction This post aims to consolidate a list of useful smartphone codes
DFIR Playbook - Network Forensics
Introduction This post aims to replicate my physical playbook on Networking and includes the following tools
DFIR Playbook - Memory Analysis
Introduction This post aims to replicate my physical playbook on Memory Analysis and includes the following tools
DFIR Playbook - Disk Images
Introduction This post aims to replicate my physical playbook on Disk Images and includes the following tools
Analysing a VMWare Memory image with volatility
Introduction I found recently during a CTF Memory image challenge, that analysing memory images from VMWare wasn’t necessarily as easy as just having the rig...
windows
PowerShell Cheat Sheet
Introduction
Negative Decimal DWORD to Human Format
Introduction
DFIR Playbook - Windows Forensics(WIP APR21)
Last Updated
DFIR Playbook - Memory Analysis
Introduction This post aims to replicate my physical playbook on Memory Analysis and includes the following tools
sysadmin
PowerShell Cheat Sheet
Introduction
Full Featured IDE For Bash Scripting
Introduction I’ve had a few colleagues ask me how I have a full featured Bash IDE for courses I have developed; So I thought i’d make a post to show people h...
Basic Linux Resources (V2.1)
Last Update 15APR21 - Added filefrag command
linux
DFIR Playbook - Memory Analysis
Introduction This post aims to replicate my physical playbook on Memory Analysis and includes the following tools
Full Featured IDE For Bash Scripting
Introduction I’ve had a few colleagues ask me how I have a full featured Bash IDE for courses I have developed; So I thought i’d make a post to show people h...
Basic Linux Resources (V2.1)
Last Update 15APR21 - Added filefrag command
oscp
Vmware VMDK mmls partition type
Introduction How to convert vmdk’s that might be compressed when you get the error abender@sift:~$ mmls sample.vmdk Cannot determine partition type abender@s...
OSCP Notes
Introduction A tabled summary of common commands used
offensive
Vmware VMDK mmls partition type
Introduction How to convert vmdk’s that might be compressed when you get the error abender@sift:~$ mmls sample.vmdk Cannot determine partition type abender@s...
OSCP Notes
Introduction A tabled summary of common commands used
debug
Reverse Engineering Crypto Keys - WIP Notes
Preface I am by no means a programming, or RE expert. But I’m going to have a go at explaining the issue of finding the needle in a haystack of an XOR key us...
Full Featured IDE For Bash Scripting
Introduction I’ve had a few colleagues ask me how I have a full featured Bash IDE for courses I have developed; So I thought i’d make a post to show people h...
vmware
Analysing a VMWare Memory image with volatility
Introduction I found recently during a CTF Memory image challenge, that analysing memory images from VMWare wasn’t necessarily as easy as just having the rig...
bash
Full Featured IDE For Bash Scripting
Introduction I’ve had a few colleagues ask me how I have a full featured Bash IDE for courses I have developed; So I thought i’d make a post to show people h...
programming
Reverse Engineering Crypto Keys - WIP Notes
Preface I am by no means a programming, or RE expert. But I’m going to have a go at explaining the issue of finding the needle in a haystack of an XOR key us...
reverse_engineering
Reverse Engineering Crypto Keys - WIP Notes
Preface I am by no means a programming, or RE expert. But I’m going to have a go at explaining the issue of finding the needle in a haystack of an XOR key us...
disk
DFIR Playbook - Disk Images
Introduction This post aims to replicate my physical playbook on Disk Images and includes the following tools
tsk
DFIR Playbook - Disk Images
Introduction This post aims to replicate my physical playbook on Disk Images and includes the following tools
mft
DFIR Playbook - Disk Images
Introduction This post aims to replicate my physical playbook on Disk Images and includes the following tools
timeline
DFIR Playbook - Disk Images
Introduction This post aims to replicate my physical playbook on Disk Images and includes the following tools
memory
DFIR Playbook - Memory Analysis
Introduction This post aims to replicate my physical playbook on Memory Analysis and includes the following tools
process
DFIR Playbook - Memory Analysis
Introduction This post aims to replicate my physical playbook on Memory Analysis and includes the following tools
malware
DFIR Playbook - Memory Analysis
Introduction This post aims to replicate my physical playbook on Memory Analysis and includes the following tools
rootkit
DFIR Playbook - Memory Analysis
Introduction This post aims to replicate my physical playbook on Memory Analysis and includes the following tools
network
DFIR Playbook - Network Forensics
Introduction This post aims to replicate my physical playbook on Networking and includes the following tools
pcap
DFIR Playbook - Network Forensics
Introduction This post aims to replicate my physical playbook on Networking and includes the following tools
netflow
DFIR Playbook - Network Forensics
Introduction This post aims to replicate my physical playbook on Networking and includes the following tools
mobile
Mobile Phone Codes
Introduction This post aims to consolidate a list of useful smartphone codes
verification
Negative Decimal DWORD to Human Format
Introduction
automation
PowerShell Cheat Sheet
Introduction