Collaborate Disseminate
I’ve blogged a bit…okay, a LOT…over the years on the topic of parsing LNK files, but a subject I really haven’t touched on is LNK builders or generators. This is actually an interesting topic because it ties into the cybercrime economy quite nicely… Continue reading LNK Builders
As most regular readers of this blog can tell you, I’m a bit of a fan of LNK files…a LNK-o-phile, if you will. I’m not only fascinated by the richness of the structure, but as I began writing a parser for LNK files, I began too see some interes… Continue reading Toolmarks: LNK Files in the news again
I’ve been putting some serious thought into the topic of a new #DFIR model, and in an effort to extend and expand upon my previous post a bit, I wanted to take the opportunity to document and share some of my latest thoughts.I’ve d… Continue reading On #DFIR Analysis, pt II – Describing Artifact Constellations