E-Bärs Xopedia

SOC

titannet (titannet@undisclosed.example.com) — 2026-06-18T15:03:54+00:00

SOC

template.7z - created

titannet (titannet@undisclosed.example.com) — 2026-06-18T15:03:46+00:00

Prefetch - created

titannet (titannet@undisclosed.example.com) — 2026-06-18T15:00:43+00:00

Prefetch #![allow(clippy::unwrap_used, clippy::expect_used)] use std::path::PathBuf; use std::fs; use std::path::Path; use chrono::{DateTime, Utc}; /// based on https://docs.rs/crate/prefetch-core/0.1.0/source/examples/pf_dump.rs fn filetime_to_datetime(ft: i64) -> DateTime { // FILETIME epoch (1601-01-01) -> Unix epoch (1970-01-01) const EPOCH_DIFF_100NS: i64 = 116_444_736_000_000_000; let unix_100ns = ft - EPOCH_DIFF_100NS; let secs = unix_100ns / 10_000_000; …

Windows Disk Image - [Prefetch on Linux]

titannet (titannet@undisclosed.example.com) — 2026-06-18T14:51:38+00:00

Windows Disk Image * Assumes basic setup from setup * All command below should be * copied to a “IR log” text/md file * edited as needed * executed with output copied back to “IR log” * recommendation: move commands/output from

Wireshark - created

titannet (titannet@undisclosed.example.com) — 2026-06-18T11:34:42+00:00

Wireshark tshark -nr -Y "dns.flags.response == 0" -T fields -e dns.qry.name -e dns.qry | sort | uniq -c

Active Directory

titannet (titannet@undisclosed.example.com) — 2026-06-18T06:06:10+00:00

Active Directory Principles SPN * Service principal name * Unique identifier used in windows environments to link a specific network service to the Active Directory account running that service * Reddit src An SPN is how your computer identifies a service on a network. That service could a be network protocol like HTTP or SMB. SPN and SPN binding are the same thing. Or rather, the binding is the literal registration of the SPN to the service a…

ex_htb_updown1.png - created

ebaer (ebaer@undisclosed.example.com) — 2022-12-31T14:13:40+00:00

htb-ambassador-1.jpg - created

ebaer (ebaer@undisclosed.example.com) — 2022-12-22T09:38:37+00:00