
LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
ai-securitydigital-forensicsincident-response+2
3.3k2 months ago

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Full analysis of a never documented before Remote Access Trojan linked to Pjoao1578 toolchain

ParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…

Technical analysis of a multi-stage Adobe Acrobat PDF JavaScript sample, detailing environment triage, Acrobat API abuse, and in-memory payload…