Br3akp0int

Advanced
@tccontre

malware/security researcher and forensic

Reg-Restore-Persistence-Mole. a short C code POC to gain persistence and evade sysmon event code registry (creation, update and deletion) REG_NOTIFY_CLASS Registry Callback of sysmon driver filter. RegSaveKeyExW() and RegRestoreKeyW() API which is not included in monitoring. This POC will use

66

KnowledgeBase. Collection of tips, tools, arsenal and techniques I've learned during RE and other CyberSecStuff

58

DBOBUS. a simple python script to de-obfuscate ABOBUS Batch script obfuscator

9

python-splunk-sdk_example. simple python script using python-splunk-sdk for automating query and searches

1
4
Apply