https://matt-pichelmayer.squarespace.com/blog daily 1.0 2021-07-26 https://matt-pichelmayer.squarespace.com/blog/2018/4/27/dcom-security-setting-enumeration-in-powershell monthly 0.5 2018-06-22 https://matt-pichelmayer.squarespace.com/blog/2018/6/1/powershell-remote-diskless-mft-snaggin monthly 0.5 2018-08-03 https://matt-pichelmayer.squarespace.com/blog/2018/6/12/ly2x7iubz73hyqnq5jjprh5o0upmvx monthly 0.5 2018-08-05 https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529437970180-YPDC8PQFNGTN40G93L4V/Windows+10+-+Developer+mode.png JitSeq - Installing Kali Tools on Windows 10 Subsystem for Linux https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529438066326-CGWGUNRRRWL7JT6G831B/startingbash.png JitSeq - Installing Kali Tools on Windows 10 Subsystem for Linux https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529438249351-TCJ8GEU8PFROIXOU1ARS/katoolin+kali+install.png JitSeq - Installing Kali Tools on Windows 10 Subsystem for Linux https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529438149193-9T095RTNUQF6OKL6CGMF/katoolin.png JitSeq - Installing Kali Tools on Windows 10 Subsystem for Linux https://matt-pichelmayer.squarespace.com/blog/2018/6/12/forensics-parsing-lnk-files-with-powershell monthly 0.5 2018-06-19 https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529436542424-HSRD3PUFNXAVR94O0DXM/Get-RecentFiles+Output+Parse+Option.PNG JitSeq - Forensics: Parsing .Lnk Files with Powershell https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529436838596-FIZM2QY6OOFY22PRY8X1/Parse-LnkFile+Output.PNG JitSeq - Forensics: Parsing .Lnk Files with Powershell https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529436361061-IUC1IGQWDXUIXXDUTRHY/Get-RecentFiles+Output.PNG JitSeq - Forensics: Parsing .Lnk Files with Powershell https://matt-pichelmayer.squarespace.com/blog/2018/6/19/powershell-parsing-procmon-data monthly 0.5 2018-09-04 https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529431866576-2JC59GE8B8F8WTMG1F1L/ProcMonCSVOutput.PNG JitSeq - Parsing ProcMon Data in Powershell https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529434039985-IXER6ZQ8RBS3WWMB5SMQ/Powershell+-+Procmon+Format+Table.PNG JitSeq - Parsing ProcMon Data in Powershell https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529433945968-EZKR9L8PGGE0S4DHVEAM/Powershell+-+Procmon+Output.PNG JitSeq - Parsing ProcMon Data in Powershell https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1529434139152-1YZH85WNDEDVA7DHLGI4/Get-Content.PNG JitSeq - Parsing ProcMon Data in Powershell https://matt-pichelmayer.squarespace.com/blog/2018/6/21/kansa-collecting-linux-information-via-ssh monthly 0.5 2018-08-05 https://matt-pichelmayer.squarespace.com/blog/2018/7/7/free-credentials-via-event-log-plundering monthly 0.5 2018-08-05 https://matt-pichelmayer.squarespace.com/blog/2018/7/16/protip-avoid-credential-stuffing-attacks monthly 0.5 2018-07-16 https://matt-pichelmayer.squarespace.com/blog/2018/8/31/chasing-amsi monthly 0.5 2020-07-22 https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535759824352-X8FVB5ENJ64QRDPS0YZS/s10.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535739127836-ATHGYLPWVJD3VTCCEB6B/s4.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) Winner winner, chicken dinner! https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535737111576-AR8MYO09ZSPB2YMDX559/1.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535737051697-IC5OFRCBNY8UMME1V5ZQ/p2.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535739606703-3WUV5UO5VXZ8TK7YS14S/s5.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535736875129-CFDBYRJBWDFB2K5FODAO/Untitled.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535759119536-M5UVULV3R00CORV2VHP1/s9.PNG JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535740376130-FJ5P0Y9SPEIN8MSZLB92/s6.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535741322446-1AVKVF0LOZQMBXVBD56A/s8.PNG JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535740524713-JWA2CJ4700MZJ6A0GAXF/s7.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535737213018-07H2JTO4F1CABRN4BO63/s3.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535737156008-HZPZ3T36HXW0V9AKBX81/s1.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535737076967-I0TN3IVUEOHFFBHQOQ81/s2.png JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1536089133928-UVC91KKEEGP6NYZSM92H/s12.PNG JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535736954474-2R4GCDKKFIW52WUCQ5RH/s.PNG JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1535761072846-YT7NF7FTY18Z52BGOURI/s11.PNG JitSeq - Chasing AMSI (Anti-Malware Scripting Interface) https://matt-pichelmayer.squarespace.com/blog/2019/4/21/reading-remote-process-args monthly 0.5 2019-04-23 https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1555943734370-RLCAVG218L8W8WFRQIJB/cmdline.PNG JitSeq - Reading the Process Environment Block in C#/Powershell https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1555943514420-8RVA5RK1IIN3T6R0R394/PEB.PNG JitSeq - Reading the Process Environment Block in C#/Powershell Pass in the Process ID to the assembly https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1555940201488-THWFO9RDM5GIGF1N8BPH/71.png JitSeq - Reading the Process Environment Block in C#/Powershell https://matt-pichelmayer.squarespace.com/blog/2020/4/3/powershell-browser-automation monthly 0.5 2020-04-07 https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1585922396331-BA6OG2VML893R0H9OAE5/htmlObject1.png JitSeq - Powershell Browser Automation https://matt-pichelmayer.squarespace.com/blog/python-dns-exfiltration-server monthly 0.5 2020-10-23 https://matt-pichelmayer.squarespace.com/blog/2020/10/23/ms-office-document-data-exfiltration monthly 0.5 2020-10-23 https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1603473210945-TXV3QJ92XMCA85A35171/16bytes.PNG JitSeq - MS Office Document Data-Hiding/Exfiltration https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1603478067767-GPXP82KHVXHUG7HI1NG1/pack.png JitSeq - MS Office Document Data-Hiding/Exfiltration https://images.squarespace-cdn.com/content/v1/5a93224fb40b9d58b19370c1/1603469707546-QAA4A4VK0DNHKGYW38L2/PKheader.PNG JitSeq - MS Office Document Data-Hiding/Exfiltration hexdump of a .docx file https://matt-pichelmayer.squarespace.com/blog/tag/Powershell monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/Programming monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/ssh monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/data+exfiltration monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/Cyber+Defense monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/pentesting monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/Scripting monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/password+harvesting monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/red+team+operations monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/Cyber monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/hacking monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/threat+hunting monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/powershell monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/linux monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/MFT monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/penetration+testing monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/password+cracking monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/python monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/cyber+defense monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/forensics monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/cyber monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/hacker monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/threat+hunter monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/red+team monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/putty monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/plink monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/kansa monthly 0.5 https://matt-pichelmayer.squarespace.com/blog/tag/cyber+operations monthly 0.5 https://matt-pichelmayer.squarespace.com/contact daily 0.75 2018-02-25 https://matt-pichelmayer.squarespace.com/scripttricks daily 0.75 2018-06-12 https://matt-pichelmayer.squarespace.com/new-page daily 0.75 2020-10-23 https://matt-pichelmayer.squarespace.com/news-feed daily 0.75 2022-02-27 https://matt-pichelmayer.squarespace.com/telefeed daily 0.75 2022-02-25