Here is an overview of content I published in October:
Blog posts:
- Quickpost: Mimikatz DCSync Detection
- Update: oledump.py Version 0.0.29
- Update: base64dump.py Version 0.0.8
- Update: pdf-parser.py Version 0.6.8
- Update: pdfid.py Version 0.2.2
- Analyzing A Malicious Document Cleaned By Anti-Virus
SANS ISC Diary entries:
- A strange JPEG file
- Peeking into .msg files
- It’s in the signature.
- Remember ACE files?
- PE files and debug info
NVISO Blog posts:
Didier Stevens 