Skip to content

Commit 786004a

Browse files
committed
Add some projects and update
1 parent 939f073 commit 786004a

File tree

58 files changed

+1880
-736
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

58 files changed

+1880
-736
lines changed

404.html

Lines changed: 1 addition & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -43,25 +43,11 @@
4343

4444

4545

46-
<link rel="stylesheet" href="/assets/combined.min.186794b3399a702d3092949042cdc215dea303c17e71e7c0254768448de11db8.css" media="all">
46+
<link rel="stylesheet" href="/assets/combined.min.678b293becfc85716bd430e0d256f68da7ace5a6f49380390b9fde3d35e8bbce.css" media="all">
4747

4848

4949

5050

51-
<script async src="https://www.googletagmanager.com/gtag/js?id=G-G41G20SLQN"></script>
52-
<script>
53-
var doNotTrack = false;
54-
if ( false ) {
55-
var dnt = (navigator.doNotTrack || window.doNotTrack || navigator.msDoNotTrack);
56-
var doNotTrack = (dnt == "1" || dnt == "yes");
57-
}
58-
if (!doNotTrack) {
59-
window.dataLayer = window.dataLayer || [];
60-
function gtag(){dataLayer.push(arguments);}
61-
gtag('js', new Date());
62-
gtag('config', 'G-G41G20SLQN');
63-
}
64-
</script>
6551

6652

6753

about/index.html

Lines changed: 1 addition & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -44,25 +44,11 @@
4444

4545

4646

47-
<link rel="stylesheet" href="/assets/combined.min.186794b3399a702d3092949042cdc215dea303c17e71e7c0254768448de11db8.css" media="all">
47+
<link rel="stylesheet" href="/assets/combined.min.678b293becfc85716bd430e0d256f68da7ace5a6f49380390b9fde3d35e8bbce.css" media="all">
4848

4949

5050

5151

52-
<script async src="https://www.googletagmanager.com/gtag/js?id=G-G41G20SLQN"></script>
53-
<script>
54-
var doNotTrack = false;
55-
if ( false ) {
56-
var dnt = (navigator.doNotTrack || window.doNotTrack || navigator.msDoNotTrack);
57-
var doNotTrack = (dnt == "1" || dnt == "yes");
58-
}
59-
if (!doNotTrack) {
60-
window.dataLayer = window.dataLayer || [];
61-
function gtag(){dataLayer.push(arguments);}
62-
gtag('js', new Date());
63-
gtag('config', 'G-G41G20SLQN');
64-
}
65-
</script>
6652

6753

6854

assets/combined.min.678b293becfc85716bd430e0d256f68da7ace5a6f49380390b9fde3d35e8bbce.css

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

g-g41g20slqn/index.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@
4444

4545

4646

47-
<link rel="stylesheet" href="/assets/combined.min.186794b3399a702d3092949042cdc215dea303c17e71e7c0254768448de11db8.css" media="all">
47+
<link rel="stylesheet" href="/assets/combined.min.678b293becfc85716bd430e0d256f68da7ace5a6f49380390b9fde3d35e8bbce.css" media="all">
4848

4949

5050

index.html

Lines changed: 23 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
dir="ltr">
44

55
<head>
6-
<meta name="generator" content="Hugo 0.140.0">
6+
<meta name="generator" content="Hugo 0.148.1">
77
<meta charset="utf-8">
88
<meta name="viewport" content="width=device-width">
99

@@ -45,25 +45,11 @@
4545

4646

4747

48-
<link rel="stylesheet" href="/assets/combined.min.186794b3399a702d3092949042cdc215dea303c17e71e7c0254768448de11db8.css" media="all">
48+
<link rel="stylesheet" href="/assets/combined.min.678b293becfc85716bd430e0d256f68da7ace5a6f49380390b9fde3d35e8bbce.css" media="all">
4949

5050

5151

5252

53-
<script async src="https://www.googletagmanager.com/gtag/js?id=G-G41G20SLQN"></script>
54-
<script>
55-
var doNotTrack = false;
56-
if ( false ) {
57-
var dnt = (navigator.doNotTrack || window.doNotTrack || navigator.msDoNotTrack);
58-
var doNotTrack = (dnt == "1" || dnt == "yes");
59-
}
60-
if (!doNotTrack) {
61-
window.dataLayer = window.dataLayer || [];
62-
function gtag(){dataLayer.push(arguments);}
63-
gtag('js', new Date());
64-
gtag('config', 'G-G41G20SLQN');
65-
}
66-
</script>
6753

6854

6955

@@ -145,8 +131,7 @@ <h1 class="header-title">
145131

146132

147133

148-
<p>Im a seasoned cybersecurity professional with a passion for incident response and threat research.<br>
149-
Currently working in Rapid7 labs tracking adversaries, and working with Velociraptor.<br>
134+
<p>Im a seasoned cybersecurity professional with a passion for incident response, threat intelligence and research.<br>
150135
This is a personal DFIR and technology blog to document some of my projects.</p>
151136

152137
</div>
@@ -223,6 +208,26 @@ <h1> Posts </h1>
223208

224209

225210

211+
<p class="line-date">1 Nov 2024 </p>
212+
213+
<div>
214+
<p class="line-title">
215+
<a href="/posts/2025/finding_the_lnk/">
216+
Finding the LNK: Techniques and methodology for advanced analysis
217+
</a>
218+
</p>
219+
220+
221+
<p class="line-summary"> Malicious exploitation of LNK files, commonly known as Windows shortcuts, is a well-established technique used by threat actors for delivery and persistence. While the value of LNK forensics for cyber threat intelligence (CTI) is fairly well-understood, analysts may overlook less well-known data points and miss valuable insights. In this post, we explore the structure of LNK files using Velociraptor. We will walk through each LNK structure and discuss some analysis techniques frequently used on the Rapid7 Labs team. </p>
222+
223+
</div>
224+
</div>
225+
226+
<div class="post-line">
227+
228+
229+
230+
226231
<p class="line-date">29 Feb 2024 </p>
227232

228233
<div>

0 commit comments

Comments
 (0)