Collaborate Disseminate
I received a question recently, one I receive every now and again, asking if there are any updates to an open source tool I created a while back, called “RegRipper”. This time, the question came in this way:Is there any update on reg tool?After a … Continue reading Question on Open Source Tools
I’m not a fan of many podcasts. I do like a conversational style, and there are some podcasts that I listen to, albeit not on a regular basis, and not for technical content. They’re mostly about either “easter eggs” in Marvel or DC movies, or the … Continue reading Perspectives on Cybersecurity
Every now and then, I get contacted by someone who tells me that they used the open source tools I’ve released in either a college course they took, or in a course provided by one of the many training vendors in the industry. I even once responded… Continue reading Releasing Open Source Tools to the Community
I was reading a pretty interesting write-up from Seqrite regarding, in part, the use of pseudo-polyglot documents. In this case, delivery occurred via ZIP archive that contains an LNK file and a PNG file. The PNG file is pseudo-polyglot file in questio… Continue reading Intel in LNK Files
Maurice posted on LinkedIn recently about one of the FeatureUsage Registry key subkeys; specifically, the AppSwitched subkey. Being somewhat, maybe even only slightly aware of the Windows Registry, I read the post with casual, even mild inter… Continue reading Registry: FeatureUsage
I saw it again, just today. Another post on social media stating that IT teams/defenders “face unprecedented complexity”. This one stood out amongst all of the posts proclaiming the need for agentic AI on the defender’s side, due to how these… Continue reading Unprecedented Complexity
Warning – before you get started reading this blog post, it’s only fair that I warn you…in this post, I make the recommendation that you document your analysis process. If you find this traumatic, you might want to just move on. ;-)Robert Jan Mora, a… Continue reading Thoughts on Analysis
In writing Investigating Windows Systems, published in 2018, I made use of publicly available images found on the Internet. Some were images posted as examples of techniques, others were posted by professors running courses, and some were from CTFs. If… Continue reading Images
I’m a huge fan of MS file formats, mostly because they provide for the possibility of an immense (and often untapped, unexploited) amount of metadata. Anyone who’s followed me for any length of time, or has read my blog, knows that I’m a huge fan of fi… Continue reading File Formats
Over the passed couple of days, I’ve had images pop up in my feed showing people’s workstations, most often with multiple screens. I’ve seen various configurations, some with three or more screens, but the other thing I’ve noted is that for those socia… Continue reading What We Value