Forum Discussion

Bronze III

1 day ago

DFIR CTF: Malware Memory - Question 9

For What is the name of the JSON file that exists inside the NetDefender directory? when running the command: vol.py -f malwarememory.vmem --profile=Win7SP1x86_23418 filescan | grep -i "NetDefend...

immersive labs

LewisMutton

Ambassador

5 hours ago

Hi, have you tried using mftparser to look at the Master File Table? 😉

Forum Discussion

DFIR CTF: Malware Memory - Question 9

Featured Places

Help

Related Content

Mobile Malware: Anubis Malware (Offensive) - Question 8,9

Practical Malware Analysis: Demonstrate Your Skills Malware (Offensive)

Practical Malware Analysis: Static Analysis question 18

Practical Malware Analysis: Static Analysis question 19

Malware Analysis: Shlayer

Recent Discussions

AI Red Teaming: Lateral Movement and Privilege Escalation – Demonstrate Your Skills

DFIR CTF: Malware Memory - Question 9

Encoding: Demonstrate your Skills

Microsoft Sentinel SOAR: Demonstrate Your Skills

Incident Response: Application Shimming