Login
From:
Securelist
(Uncensored)
subscribe
Forensic journey: Breaking down the UserAssist artifact structure
https://securelist.com/userassist-artifact-forensic-value-for-incident-response/116911/
links
backlinks
Tagged with:
research
cybersecurity
incident response
microsoft windows
soc
threat hunting
digital forensics
researchers tools
A Kaspersky GERT expert describes the UserAssist Windows artifact, including previously undocumented binary data structure, and shares a useful parsing tool.
Roast topics
Find topics
Find it!
