Cyber Fibers https://validator.w3.org/feed/docs/rss2.html PowerShell Cheat Sheet BlueSpectrum, an IOC framework written in PowerShell Find Malicious Versions of CCleaner UTW Google UTW skittles Teamviewer Forensic Artifacts Presentations PowerShell Web Server for Raw Text Transmission No Need to Unzip, Just Use Zcat or Zgrep Under the Wire v2 SRUM DB… Enhancing Forensics! Reducing SMBv3 Vulnerability Attack Surface Blocking DNS Tunneling at the Host Finding Services Tied to Processes Reducing the Attack Surface for BlueKeep Parsing IIS Logs Validating the Presence of an Item across multiple computers About Me Analyzing Memory in the Wonderful World of Redline Parsing Registry files with RegRipper Invoke-Ghostlog: An Event Log Wiping Technique Don’t Forget about Domain Trusts Detecting Alternate Data Streams with PowerShell and DOS Mass Import of McAfee Firewall Domains to block Hashes of All Running Processes Hidden Gems in McAfee ePO Audit Logs Fileless Malware Storage: Registry – 1 of 4 Fileless Malware Storage: Active Directory– 2 of 4 Fileless Malware Storage: Event Logs– 3 of 4 Fileless Malware Storage: Group Policy Objects- 4 of 4 Bare Monkey (Volatility) Skittle Grinder (Linux Log Collection) Under The Wire! Presentations and Publications Get Registry Hives and Keys Remotely Finding Passwords in Text Files with PowerShell Invoke-Fail2Ban Analyzing Various Memory Capture Formats Parsing Bitvise Logs for Analysis Getting hashes with Microsoft’s File Checksum Integrity Verifier (FCIV) Hunting Self-signed Certificates Application Whitelisting with Applocker Finding Reflective DLL Injections Determining WinRM connections to a Machine Sinkhole Domains Using DNS with the help of PowerShell Another Layer of Defense… Microsoft Baseline Security Analyzer (MBSA) Retrieving Files You’ve Uploaded to Microsoft Teams Base64 with PowerShell PowerShell Web Server for File Transmission