utmpdump dual-purpose
utmpdump dual-use Default Unix systems have little forensic information (vs Windows) and a lot of useful utilities. For example, there is a "wonderful" utility…
[ FEED // CHRONO // 267 ITEMS ]
utmpdump dual-use Default Unix systems have little forensic information (vs Windows) and a lot of useful utilities. For example, there is a "wonderful" utility…
❕ The ExCobalt group uses a new tool GoRed During incident response at our client, we discovered a file named scrond on one of the Linux nodes, "wrapped" with U…
🧐 Peculiarities of Reading the Microsoft Defender Quarantine And those who want to and can, do this, among other things, using the script defender-dump.py. In t…