corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0be06-5d54-714c-9275-2b4ec7aeecb3

Beginning PowerShell Empire - Packet Analysis

securitynik.com · published 3 February 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securitynik.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
15
Words captured
4,421

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
Beginning Powershell Empire - The Attack in 10 steps Read at the source ↗
securitynik.com
Beginning PowerShell Empire - Log Analysis Read at the source ↗
securitynik.com
https://blogs.keysight.com/blogs/tech/nwvs.entry.html/2021/06/16/empire_c2_-_networki-C4rq.html
blogs.keysight.com
Powershell Empire - Detection with Snort3 Read at the source ↗
securitynik.com
Powershell Empire - Detection with Zeek Read at the source ↗
securitynik.com
https://stackoverflow.com/questions/38546887/decrypting-powershell-empire
stackoverflow.com
https://www.giac.org/paper/gcfa/13277/disrupting-empire-identifying-powershell-empire-command-control-activity/152744
giac.org
https://medium.com/@nikhilsda/encryption-and-decryption-in-powershell-e7a678c5cd7d
medium.com
https://docs.python.org/3/library/base64.html
docs.python.org
https://pycryptodome.readthedocs.io/en/latest/src/cipher/arc4.html
pycryptodome.readthedocs.io
https://www.geeksforgeeks.org/python-convert-string-to-bytes/
geeksforgeeks.org
https://stackoverflow.com/questions/29607753/how-to-decrypt-a-file-that-encrypted-with-rc4-using-python
stackoverflow.com
https://blog.finxter.com/python-convert-unicode-to-bytes-ascii-utf-8-raw-string/
blog.finxter.com
https://plaintext.do/AV-Evasion-Converting-PowerEmpire-Stage-1-to-CSharp-EN/
plaintext.do
https://www.harmj0y.net/blog/powershell/powershell-rc4/
harmj0y.net