corpus.blog
43,771 blogs · 5,563,491 posts Claim your blog
Record · corpus.blog/posts/01a08755-4283-7125-80f2-958342015a53

Gaining Threat-Intelligence the REALLY dodgy way

blog.tofile.dev · published 30 November 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.tofile.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
19
Words captured
1,556

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/hfiref0x/KDU
github.com
https://github.com/microsoft/krabsetw
github.com
https://github.com/pathtofile/Sealighter
github.com
https://www.crowdstrike.com/blog/protected-processes-part-3-windows-pki-internals-signing-levels-scenarios-signers-root-keys/
crowdstrike.com
https://twitter.com/aionescu
twitter.com
https://twitter.com/tiraniddo
twitter.com
http://publications.alex-ionescu.com/Recon/Recon%202018%20-%20Unknown%20Known%20DLLs%20and%20other%20code%20integrity%20trust%20violations.pdf
publications.alex-ionescu.com
https://googleprojectzero.blogspot.com/2018/08/windows-exploitation-tricks-exploiting.html
googleprojectzero.blogspot.com
https://twitter.com/itm4n
twitter.com
https://github.com/itm4n/PPLdump
github.com
https://github.com/pathtofile/SealighterTI
github.com
https://itm4n.github.io/the-end-of-ppldump/
itm4n.github.io
https://github.com/hfiref0x/KDU/pull/44
github.com
https://learn.microsoft.com/en-us/windows/win32/procthread/process-creation-flags
learn.microsoft.com
https://github.com/hfiref0x/KDU/blob/master/Source/Hamakaze/ps.cpp
github.com
https://itm4n.github.io/lsass-runasppl/
itm4n.github.io
https://en.wikipedia.org/wiki/WHQL_Testing
en.wikipedia.org
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16098
cve.mitre.org
https://itm4n.github.io/lsass-runasppl
itm4n.github.io
Elsewhere on blog.tofile.dev (3)