#forensics

• Extracting WEVT_TEMPLATES from PE files
  June 1, 2020
• Recent projects
  September 2, 2015
• Towards better tools: Part 2
  February 8, 2014
• Towards better tools: Part 1
  February 7, 2014
• MFT Analysis Presentation
  December 13, 2013
• April Fool's: TSK and the Registry
  April 1, 2013

bookmarks

• An inside look at NSA (Equation Group) TTPs from China’s lense
  February 19, 2025