
PolinRider
Technical dossier on the DPRK-linked PolinRider supply-chain attack, documenting obfuscated JS payload injection, git history manipulation, C2…

Technical dossier on the DPRK-linked PolinRider supply-chain attack, documenting obfuscated JS payload injection, git history manipulation, C2…

Hide 🕵️♂️ your files of any type inside a image of your choice using steganography

TryHackMe CTF writeup — WordPress RCE via CVE-2024-25600, crypto miner forensics, and LockBit ransomware group identification

CLI tools for forensic investigation of Windows artifacts

Retrieve the master password of a keepass database <= 2.53.1

A Repository to Track Anti-Forensic Techniques

ETW-based Windows process creation logger that enriches events with file hashes, signatures, and parent process details, outputting to Windows…

This repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux…

Live Windows forensic acquisition tool that collects system artefacts (registry, memory, disk, files) into CSV/JSON for early compromise detection…