Archive

December 2024

Dec 02 -

Case of Using Phantom DLL Hijacking

November 2024

Nov 28 -

가을 등반대회 : 청계산의 추억

October 2024

Oct 30 -

사고 대응 전문가의 눈으로 본 CrowdStrike Falcon EDR 활용 방안

September 2024

Sep 10 -

A Journey Through Black Hat USA 2024 in Las Vegas: BlackHat USA 2024 참관기

August 2024

Aug 14 -

한컴오피스 2024 설치파일로 위장해 유포 중인 악성코드

July 2024

Jul 16 -

Upgrade된 두 번째 PLB Day : Our 2nd PLB Day

July 2024

Jul 01 -

Wordpress File upload vulnerability of theme and plugin upload function

June 2024

Jun 19 -

세계로 나아가는 PLAINBIT : Global PLAINBIT

June 2024

Jun 14 -

리눅스용 DFIR 수집 도구 - bitCollector

June 2024

Jun 12 -

우리의 첫번째 PLB Day : Our first PLB Day

June 2024

Jun 03 -

Alphapo/CoinsPaid Hot Wallet Hack

May 2024

May 28 -

Differences between analyzing with AXIOM and manual analysis

May 2024

May 09 -

BJ-DDoS에 대해: An expert's perspective on BJ-DDoS

April 2024

Apr 11 -

플레인비트의 새로운 오피스를 소개합니다: Introducing PLB's new office

April 2024

Apr 05 -

Analysis of *.chm malware

April 2024

Apr 04 -

오늘만큼은 PLAY비트: Playbit for Today!

April 2024

Apr 03 -

Analysis of ROKRAT Malware inside LNK Malicious file from North Korea

March 2024

Mar 20 -

How to use AXIOM Process effectively

March 2024

Mar 11 -

i-SOON leaks : An overview of Chinese data leakage

March 2024

Mar 08 -

스마트폰을 떨어뜨렸을 뿐인데: Just Dropped Smartphone Operation

March 2024

Mar 04 -

ETL File analysis in live

March 2024

Mar 01 -

How to decrypt malicious file in MS Defender Quarantine from Forensic image files

February 2024

Feb 02 -

OpenCTI : Effective Cyber Threat Intelligence framework

January 2024

Jan 15 -

Remote Collecting using Magnet IGNITE

January 2024

Jan 11 -

Tracking Wannacry Ransomware bitcoin addresses

January 2024

Jan 09 -

Traffic Light Protocol (TLP) 2.0

December 2023

Dec 28 -

2023 Incident Response Service for medium-sized business : Sharing IR case seminar - Survey

December 2023

Dec 28 -

2023 Incident Response Service for medium-sized business : Sharing IR case seminar

December 2023

Dec 26 -

A Practical guide for Sysmon : Bypassing response and detection

December 2023

Dec 08 -

Malicious PyPI package that steal Cryptocurrency wallet data

November 2023

Nov 22 -

Your cryptocurrency wallet software is safe?

October 2023

Oct 25 -

Collecting screening data with AXIOM

October 2023

Oct 25 -

Techno Security & Digital Forensics Conference 2023

October 2023

Oct 19 -

Introduction to Sweeper Bot

October 2023

Oct 11 -

Introduction to Magnet OUTRIDER

October 2023

Oct 06 -

AXIOM Custom Artifacts

September 2023

Sep 24 -

Introduction to Magnet IGNITE

August 2023

Aug 29 -

2023 State of DFIR Trend Report from MAGNET

August 2023

Aug 16 -

Deep dive into MS-SQL IR Case : Stored procedure analysis - Response

August 2023

Aug 16 -

Deep dive into MS-SQL IR Case : Stored procedure analysis - CLR Shell

August 2023

Aug 16 -

Deep dive into MS-SQL IR Case : Stored procedure analysis - xp_cmdshell

August 2023

Aug 10 -

A Practical guide for Sysmon : Use ArchiveDirectory

August 2023

Aug 02 -

Messenger analysis using AXIOM

July 2023

Jul 31 -

Deep dive into MS-SQL IR Case : Trend and attack method

July 2023

Jul 28 -

Soft Fork vs Hard Fork

July 2023

Jul 06 -

DeFi(Decentralized Finance)

June 2023

Jun 30 -

Sysmon v15.0 Update

June 2023

Jun 09 -

Introduction to Stealth Address

June 2023

Jun 07 -

Kimsuky(Threat actor)'s bitcoin address tracking

June 2023

Jun 02 -

Case of Inserting Credit cards payments Phishing page

May 2023

May 23 -

Introduction to Smart contract

May 2023

May 17 -

Cryptocurrency Scam process

May 2023

May 15 -

Introduction to Oracle Problem

May 2023

May 08 -

Create an IoC(Indicator of Compromise)

May 2023

May 04 -

A Practical guide for Sysmon : Configure file fields and writing

April 2023

Apr 28 -

A Practical guide for Sysmon : Event items

April 2023

Apr 26 -

Azure remote collecting using AXIOM Cyber

April 2023

Apr 26 -

Introduction to Magnet AXIOM

April 2023

Apr 25 -

AWS remote collecting using AXIOM Cyber

April 2023

Apr 24 -

Windows remote collecting using AXIOM Cyber

April 2023

Apr 21 -

A Practical guide for Sysmon : Concept and install

April 2023

Apr 21 -

macOS remote collecting using AXIOM Cyber

April 2023

Apr 21 -

Compare Collection Tools

April 2023

Apr 21 -

Euler Finance Flash Loan Attack : Deep dive into Smart contract

April 2023

Apr 21 -

Euler Finance Flash Loan Attack

April 2023

Apr 21 -

Linux remote Collecting using AXIOM Cyber

April 2023

Apr 20 -

Introduction to Flash Loan

April 2023

Apr 19 -

Introduction to CoinJoin

April 2023

Apr 17 -

Introduction to Peel Chain

April 2023

Apr 13 -

Introduction to AXIOM Cyber

April 2023

Apr 04 -

Tracking bitcoin addresses of DPRK's ransomware

April 2023

Apr 04 -

Apollo X Exchange attacker address tracking

April 2023

Apr 04 -

Colonial Pipeline Ransomware attacker address tracking

March 2023

Mar 29 -

Understanding about QLUE Graph

March 2023

Mar 29 -

Clustering and Heuristic algorithm in Bitcoin address tracking

March 2023

Mar 28 -

Introduction to Atomic Swap

September 2021

Sep 14 -

Userassist Artifacts

September 2021

Sep 14 -

FTP Program Artifacts

September 2021

Sep 14 -

NLBrute with Event Logs

September 2021

Sep 14 -

RID Hijacking Artifacts

September 2021

Sep 14 -

Deletion behavior Artifacts

September 2021

Sep 14 -

WSL(Windows Subsystem for Linux) Artifacts

September 2021

Sep 12 -

Microsoft Defender Artifacts

September 2021

Sep 12 -

Chromium based Browser Artifacts

January 2021

Jan 19 -

Cloud data, How are you collecting it?

June 2020

Jun 29 -

Database Management Tools Log pattern compare: PMA & Adminer

June 2020

Jun 29 -

Win10 PE Forensics: 윈도우 10 PE 포렌식 – CLI 형식으로 설치 및 부팅

April 2020

Apr 03 -

What are the forensic analysis tools used by experts?

March 2020

Mar 02 -

Imager Performance Test : TASKFORCE VS. TX1 VS. FORENSIC FALCON

February 2020

Feb 26 -

New hardware Imager : ATOLA TASKFORCE

February 2020

Feb 24 -

X-PERT Certificate Test

February 2020

Feb 14 -

Mgnet AXIOM Webinar

May 2019

May 25 -

Google Drive for Windows client artifacts analysis - 2

January 2019

Jan 07 -

Google Drive for Windows client artifacts analysis - 1

August 2018

Aug 08 -

DPAPI Decryption without User Password

June 2018

Jun 05 -

2018 PLAINBIT Workshop in Saipan

May 2018

May 28 -

Forensic Cheatsheet

May 2018

May 14 -

About Volume Serial Number

June 2017

Jun 14 -

Enfuse 2017 Review - 1

Success! Your account is fully activated, you now have access to all content.

Error! Stripe checkout failed.

Success! Your billing info is updated.

Error! Billing info update failed.