Cyber Aku

[Cyber Aku @CyberAku]

I've created a small list of Iranian websites which could be used for OSINT purposes.
https://t.co/s6W0aA52si
#Iran #OSINT

[Cyber Aku @CyberAku]

New blog post after a while :)
It's about Instagram Contact exploitation which can be used for #OSINT purposes.
Hope you enjoy it ;)
https://t.co/qGtCncmGPJ

[Ben Sadeghipour @NahamSec]

#NahamCon2022 CTF Starts in a little under 48 hours. Hosted by @_JohnHammond and team!
https://t.co/gcVTC4qvd8

[13Cubed @13CubedDFIR]

New 13Cubed episode is up for Patreon supporters (https://t.co/bdtbW6gwbj)!

[L4ys @_L4ys]

I don't know why I made this LOL

[Cyber Aku @CyberAku]

#Metadata in my opinion :)

[Lawrence Abrams @LawrenceAbrams]

Confused with these PowerShell obfuscation techniques.

Anyone able to share how these results in actual commands that are executed?

[strandjs - [email protected] @strandjs]

"Don't learn to hack. Hack to learn."

What old school security quote still sticks with you?

[SOS Intelligence @SOSIntel]

Somebody at GCHQ has a sense of humour.

[Steve YARA Synapse Miller @stvemillertime]

Did you know that 7zip can "unzip" VMware VMDKs?

Quickly build a ~"goodware" repo for testing your #100DaysofYARA rules w/ a free Windows 10 VM https://t.co/dzHhla9yIE

Unzip and uze 7zz to extract the VMDK

7zz x ~/MSEdge-Win10-VMware/MSEdge-Win10-VMware-disk1.vmdk -oMSEdge-vm

[David Buchanan does not tweet anymore @David3141593]

Transfer your PC clipboard to a nearby mobile device:

xclip -o -s c | qrencode -o - | feh --force-aliasing -ZF -

[reverseame @reverseame]

Do you want to know what things can be recovered from memory in Telegram Desktop? Take a look at our latest post, a contribution from Pedro Fernández-Álvarez, member of our research team https://t.co/rHE41N8Fqf

[Cyber Aku @CyberAku]

So, Can we rely on this?
I'm looking forward to your opinions :D

[Cyber Aku @CyberAku]

Hi #DFIR,

I was thinking about a way to get the #PowerShell command histories timestamps(what time the commands were executed).

I mixed #USN_Journal functionality with "ConsoleHost_history.txt" file, and it seems to work.

[Cyber Aku @CyberAku]

Whenever we enter a new command on PowerShell, a modification is made to the "ConsoleHost_history.txt" file, and this modification is recorded on USN Journal.

I put together a mini PowerShell script on top of the PowerForensics tools.

[Cyber Aku @CyberAku]

I hope you like it.
and I'm looking forward to your opinions

[Cyber Aku @CyberAku]

My first blog post :)
"From #Phishing to Money Laundering"
It's about recent wide-spreading phishing attacks in #Iran

https://t.co/fYDxDakV7Y

[Heather Mahalik Barnhart @HeatherMahalik]

Finally releasing another blog that has been long requested. Android and iOS acquisition recommendations. https://t.co/oz9ijBqkPR #DFIR #FOR585