Dan (4n6k)  

@4n6k

4n6k[.]com | Digital Forensics | Malware Research | Incident Response | |

USA
ಸೆಪ್ಟೆಂಬರ್ 2008 ಸಮಯದಲ್ಲಿ ಸೇರಿದ್ದಾರೆ

@4n6k ತಡೆಹಿಡಿಯಲಾಗಿದೆ

ನೀವು ಖಚಿತವಾಗಿಯೂ ಈ ಟ್ವೀಟ್‌ಗಳನ್ನು ನೋಡಲು ಬಯಸುವಿರಾ? ಟ್ವೀಟ್‌ಗಳನ್ನು ನೋಡುವುದು @4n6k ಅವರನ್ನು ತಡೆತೆರವುಗೊಳಿಸುವುದಿಲ್ಲ.

  1. ಪಿನ್ ಮಾಡಿದ ಟ್ವೀಟ್
    ಅಕ್ಟೋ 27,2014

    [] My reading/resource list (forensics, IR, infosec, malware, reverse engineering, programming, etc):

  2. ಫೆಬ್ರ 11

    <monthly reminder that shellbags are great artifacts and you should be using Shellbags Explorer in every case ya get>

  3. ಫೆಬ್ರ 9

    Whoever did the video production and marketing for this video did it really well.

  4. ಫೆಬ್ರ 8

    We're looking for a web pentester type to come and hack stuff with me =>

  5. ಫೆಬ್ರ 8

    I have seen many systems with files (allocated) that are actually other files or partials. Any seeing this?

  6. ಫೆಬ್ರ 3

    Both, and it's a corporate environment (Windows AD). I run Win10 Ent version 14393 (1611), the other computer Win10 Ent version 10586.

  7. ಫೆಬ್ರ 3

    Have now tested functionality on Win10 and it works against another host on the network too

  8. ಫೆಬ್ರ 3

    Results for `volrest.exe \\127.0.0.1\C$\Windows\system32 /s` std: 257 files, 26 dirs admin: 323 files, 49 dirs Sampling of some imp diffs:

  9. ಫೆಬ್ರ 3

    Running volrest.exe as admin will net you more previous version results, but std user is still able to get a ton + VSC paths w/o vssadmin.

  10. ಫೆಬ್ರ 2

    Can confirm volrest.exe works for Win7. Even works for standard non-elevated accounts. No vssadmin necessary. Can see VSC paths.

  11. ಫೆಬ್ರ 2

    Wow, volrest and this capability go back a long time:

  12. ಫೆಬ್ರ 2
  13. ಫೆಬ್ರ 2

    This exchange is a great example of the research process. Good stuff on both sides, figuring it out. 🌶 Spicy 🌶

  14. ಫೆಬ್ರ 1

    [] Forensics Quickie: Accessing & Copying Volume Shadow Copy Contents From Live Remote Systems

  15. ಜನ 30

    PROTIP: When delegated a task - even if you don't know the solution - research & *figure it out.* Those are the best people w/ whom to work.

  16. ಜನ 22

    Remember this post? Well, now there's a nice website for it all. Nice work .

  17. ಜನ 21

    And on that note, let's not forget another great and similar post by -->

  18. Dan (4n6k)   ಹಿಂಬಾಲಿಸಿದ್ದಾರೆ , ಮತ್ತು
    • @whispersystems

      Making private communication simple. For support, questions, or more information, please visit

  19. ಜನ 21

    Nice post and clean blog by . <-- students, take note. This is how you get ahead.

  20. ಜನ 13
  21. ಜನ 2

    "PowerMemory v1.4 – Exploit the credentials present in files and memory." Neat stuff.

ಲೋಡಿಂಗ್ ಸಮಯ ಸ್ವಲ್ಪ ತೆಗೆದುಕೊಳ್ಳುತ್ತಿರುವಂತೆನಿಸುತ್ತದೆ.

Twitter ಸಾಮರ್ಥ್ಯ ಮೀರಿರಬಹುದು ಅಥವಾ ಕ್ಷಣಿಕವಾದ ತೊಂದರೆಯನ್ನು ಅನುಭವಿಸುತ್ತಿರಬಹುದು. ಮತ್ತೆ ಪ್ರಯತ್ನಿಸಿ ಅಥವಾ ಹೆಚ್ಚಿನ ಮಾಹಿತಿಗೆ Twitter ಸ್ಥಿತಿಗೆ ಭೇಟಿ ನೀಡಿ.

    ಇದನ್ನೂ ಸಹ ನೀವು ಇಷ್ಟಪಡಬಹುದು

    ·