Skip to content
  • About
  • Contact
  • Find Me
  • Posts
  • LinkedIn
  • Twitter
  • GitHub
  • This Week In 4n6
Search
Close

ThinkDFIR

random musings on DFIR topics

Tag: sqlite

Updating the KnowledgeC Parser

March 21, 2019March 21, 2019 Phill MooreLeave a comment

Knowledge-is-Power

I’ve just pushed up some changes to the amazing KnowledgeC plist extraction and parsing utility that I’ve been working on with Alexis Brignoni and wanted to describe them here.

Read More »

Recent Posts

  • Tracking screenshots with LNK files
  • I can see and hear you seeing and hearing me!
  • Introducing Awesome BEC
  • You want me to deal with how many VMDKs!?
  • Metaspike CTF – Week 6 – “HODL onto your timestamps”
  • Metaspike CTF – Week 5 – “Spot the DFIRence”
  • Metaspike CTF – Week 4 – “IM APparently making this harder than it was meant to be”
  • Metaspike CTF – Week 3 – “PS(s)T, Can you keep a secret message?”
  • Metaspike CTF – Week 2 – “As per my previous email”
  • Metaspike CTF – Week 1 – “It’s legit, honest!”

Enter your email address to follow this blog and receive notifications of new posts by email.

Archives

logo

RSS SANS Teaching

  • An error has occurred; the feed is probably down. Try again later.
Website Powered by WordPress.com.
Back to top
  • Follow Following
    • ThinkDFIR
    • Join 6,650 other followers
    • Already have a WordPress.com account? Log in now.
    • ThinkDFIR
    • Customize
    • Follow Following
    • Sign up
    • Log in
    • Report this content
    • View site in Reader
    • Manage subscriptions
    • Collapse this bar
 

Loading Comments...