
Blue-Team-Notes
You didn't think I'd go and leave the blue team out, right?
curated-resourcesdigital-forensicseducation+5
1.8k

You didn't think I'd go and leave the blue team out, right?

Recovery notes for proxmox advisory ID: PSA-2026-00043-1 (CVE-2023-54391)

Read, understand and silence the Windows GDID device identifier (the ID that tracked a hacker through a VPN). Verified on a real Win11 VM. Honest: it…

🔵 Threat analysis writeup for Follina (CVE-2022-30190) — Microsoft MSDT RCE zero-day exploited in the wild. Covers static analysis, VirusTotal,…

A portable C# utility for enumerating local and remote windows sessions

An open standard for hashing network flows into identifiers, a.k.a "Community IDs".

Dump TeamViewer ID and password from memory. Works much better than other tools.