Infosec.Pub
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
digicatM to blueteamsecEnglish · 2 days ago

Windows event logs were cleared, but resurrected in another file!

dfir.ru

external-link
message-square
0
link
fedilink
5
external-link

Windows event logs were cleared, but resurrected in another file!

dfir.ru

digicatM to blueteamsecEnglish · 2 days ago
message-square
0
link
fedilink
TL;DR: The Windows Event Logging Service contains a bug (use of uninitialized memory) that sometimes results in recently deleted (cleared) log entries being stored in other (unrelated) *.evtx journ…
alert-triangle
You must log in or # to comment.

blueteamsec

blueteamsec

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !blueteamsec@infosec.pub

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 46 users / day
  • 76 users / week
  • 281 users / month
  • 967 users / 6 months
  • 219 local subscribers
  • 602 subscribers
  • 2.17K Posts
  • 169 Comments
  • Modlog
  • mods:
  • digicat
  • BE: 0.19.13
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org