If you have Symantec SEP installed you can use the "Symantec.SSHelper" COM object to launch processes and download arbitrary files.
The "User-Agent: Symantec Agent" can be used to identify requests made by the "HIDownloadURLFile"
Want a sneak peak at the upcoming features and capabilities of @volatility 3?
Then check out my recorded presentation, with the PDF of the slides included on the page. No sign-up/email/info required, just watch and enjoy!
#DFIR#infosec
@ian_infosec Remember, the only reason the security field has grown like is has was Windows. And end users that happily click on anything remotely related to pet pictures.
Today's Voice of #kidneycancer shares an all too common story about juggling multiple doctors, struggling to communicate symptoms, and financial fall-out from not being able to go back to work. Thank you Scott - We are grateful for your voice! https://t.co/IHKipGEqjX