Blue team related content
Blue Team
If an adversary compromises a system using methods such as social engineering, it is possible for an adversary to execute malware and delete it(self) from the file system while maintaining a running state. This section will cover a simple way to recover deleted files (e.g., executed malware) on
Blue Team
Code obfuscation is where entities such as adversaries and developers use a wide range of techniques to make the code harder to read but function as expected. This process is usually done using automated tools. For adversaries, obfuscating malicious code makes it harder to reverse engineer, analyse, and detect while
Guides
When performing digital forensics, we may need to recover deleted files for further investigation. This blog will cover a basic method to recover deleted files from a disk image using a tool called Autopsy. opsy | Digital ForensicsAutopsy® is the premier end-to-end open source digital forensics platform. Built by
Guides
Uncomplicated Firewall (UFW) is a command-line tool designed to simplify firewall management on Linux systems. It is built on top of iptables, and provides a user-friendly way to define rules to control network traffic. UFW can be used to create rules to control both IPv4 and IPv6 traffic.