Lsass and Credential TheftWhat is Lsass.exe The Windows Local Security Authority Subsystem Service, or lsass.exe, is an executable native to all Windows operating systems. It is a core component of Windows OS security and is responsible for the following: Which users are all...1KJun 11, 2021 · 4 min readmatryoshkahax.hashnode.dev
Ransomware: What is it and why has it taken cyberspace by storm?Unfortunately there is no rarity in daily news reporting on a new corporate victim of ransomware. The general population is most privy to its impacts because of the effects it has on the supply chain: fuel prices sky rocket, virtual services become u...1VJun 3, 2021 · 6 min readmatryoshkahax.hashnode.dev
Basic Security Log Analysis on WindowsSecurity log analysis is helpful and effective on Windows when it comes to characterizing activity involving user accounts, remote access to a network, and lateral movement amongst other behavior. Event Viewer is native to the Windows OS and allows y...May 28, 2021 · 4 min readmatryoshkahax.hashnode.dev
CTF Tools and Resources--Tool names in italics are native to Kali Multi-use tools CyberChef : Great tool for multi-layer crypto challenges, basic stego, and deobfuscation Stego Tools StegOnline : Online tool to manipulate RGB values in an image, modify image for least s...May 17, 2021 · 2 min readmatryoshkahax.hashnode.dev
dCTF - Dragon"Dragon" provides you the following prompt and image: Being that all that's provided is an image, one can assume that this will be a steganography challenge and that the flag is somehow hidden in the image. steghide will not work because the file f...May 17, 2021 · 2 min readmatryoshkahax.hashnode.dev