nganhkhoa/mether049-malware
1
0
Fork 0
mirror of https://github.com/nganhkhoa/malware.git synced 2024-06-10 21:32:07 +07:00
Code Issues Projects Releases Wiki Activity

Update malware-analysis_ref_and_memo.md

Browse Source
This commit is contained in:
mether049 2020-05-18 19:17:40 +09:00 committed by GitHub
parent 960bba7552
commit 1503fd7e50
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
malware-analysis_ref_and_memo.md
View File

@ -106,6 +106,9 @@ DFIR,マルウェア解析，OSINTに特化したUbuntuベースのディスト
- User AgentをパースするWebサービス
- User Agentに含まれる情報の調査に利用したり，一般的なUser Agentが田舎の判断に利用することが可能
- 数百万のUser Agentに対応
- **[Packetmon](https://blogs.windows.com/windowsexperience/2019/08/20/windows-admin-center-preview-1908/)**
- ref:
- [Windows 10 quietly got a built-in network sniffer, how to use](https://www.bleepingcomputer.com/news/microsoft/windows-10-quietly-got-a-built-in-network-sniffer-how-to-use/)
### Forensic
- **Windows Log**