Skip to content
  • About
  • Contact
  • Find Me
  • Posts
  • LinkedIn
  • Twitter
  • GitHub
  • This Week In 4n6
Search
Close

ThinkDFIR

random musings on DFIR topics

Tag: sqlite

Updating the KnowledgeC Parser

March 21, 2019March 21, 2019 Phill MooreLeave a comment

Knowledge-is-Power

I’ve just pushed up some changes to the amazing KnowledgeC plist extraction and parsing utility that I’ve been working on with Alexis Brignoni and wanted to describe them here.

Read More »

Recent Posts

  • A question about arbitrary values in USB registry keys
  • Sometimes Windows and PE Version information don’t get along
  • Cached screenshots on Windows 11
  • Sunday Funday – Searching for searching
  • SRUMday Funday!
  • Windows11 Wordwheelquery Woes
  • How can I be of WebAssist(ance)?
  • CPY JMP
  • Timestamps in INDX Entries
  • Tracking screenshots with LNK files

Enter your email address to follow this blog and receive notifications of new posts by email.

Archives

logo

RSS SANS Teaching

  • An error has occurred; the feed is probably down. Try again later.
Website Powered by WordPress.com.
Back to top
  • Subscribe Subscribed
    • ThinkDFIR
    • Join 79 other subscribers
    • Already have a WordPress.com account? Log in now.
    • ThinkDFIR
    • Subscribe Subscribed
    • Sign up
    • Log in
    • Report this content
    • View site in Reader
    • Manage subscriptions
    • Collapse this bar
 

Loading Comments...