Detecting Mimikatz with the Sysmon Tool
Sysmon is a tool developed by Microsoft that allows recording the activities on the device it is on. It provides detailed information for activities such …
Knowledge pool for Information Technologies
Sysmon is a tool developed by Microsoft that allows recording the activities on the device it is on. It provides detailed information for activities such …
First, we need a SQL Server with the “AdventureWorks2014” database. Secondly, we will need a Windows/Linux system with PostgreSQL 10/11/12/13 version installed. The database we …
In a Windows operating system seized during penetration tests, some operations need to be done via the command line. We will examine the basic commands …
While performing your operations with commands in the terminal, you wanted to make corrections in a file (resolv.conf etc.) with the nano editor. In this …
In forensic information examinations, computers that are thought to have been compromised by a malicious code sometimes come out, and we are expected to detect …