Adinda mirza devani·5d agoHide and Seek di Dalam KernelRootkit punya cara yang cukup unik untuk menyembunyikan proses. Salah satunya bernama DKOM, singkatan dari Direct Kernel Object…
ruthran-sec·Oct 31Phishing-Led Memory Forensics: TryHackMe Boogeyman 2 Walkthrough (Volatility and Olevba)Tracing a malicious Word macro through a RAM dump: stage 2 script, C2 connection and scheduled-task persistence.
Wendel Walter Leander·Oct 27TryHackMe Blue Team CTF (Oct 2026): Challenge 3 Day 0A write-up of challenge 3 from the 2026 Oct CTF (TryHackMe)
Mohammad Samsuzzoha·Oct 26notepad.exe Ran for 6 Seconds. Memory Forensics Exposed the Entire Attack Chain.How one out-of-place process in a Windows 10 RAM image led me to a masqueraded .NET launcher, an orphaned Tomcat server, a Defender-kill…
