Security research, writeups, and technical analysis tagged with red-writeups.
Introduction Windows forensics is traditionally associated with incident response: examining a system after compromise, reconstructing attacker activity, and identifying artifacts left behind.
Arima
Introduction "C2 All the Things" project is where I researched and listed things an attacker could use as a communication
Arima
Introduction In this article I'll demonstrate how to show off your own thickness to the application by tearing apart the
Arima
PEB PEB stands for Process Enviornment Block and is a structure in Windows used to hold critical information about a process. It
Arima