Tools: metatool.py.
ISC diary entry: Finding Metasploit & Cobalt Strike URLs
howto
oledump and YARA DDE Rules
Tools: oledump.py, YARA.
NVISO blog post: Detecting DDE in MS Office documents
ISC diary entry: DDE and oledump
tshark & Malware Analysis
pdftool.py: Incremental Updates
Tool: pdftool.py
Blog posts: Solving a Little PDF Puzzle, Shoulder Surfing a Malicious PDF Author, New Tool: pdftool.py.
Doc & RTF Malicious Document
CyberChef: Analyzing OOXML Files for URLs
Tools: CyberChef
CyberChef Recipe: here
Sample: f84b3a056abcbcfd5976afe8776a35c5894b379e65c411ddc421941d3a2a4b8b
ISC diary entry: Doc & RTF Malicious Document
Maldoc Analysis With CyberChef
Tools: CyberChef
Sample: 969ff75448ea54feccc0d5f652e00172af8e1848352e9a5877d705fc97fa0238
ISC diary entry: Maldoc Analysis With CyberChef
Process Explorer & VirusTotal: Fixed!
Tools: Fiddler, Process Explorer
ISC diary entry: Heads-up: VirusTotal Functionality in Sysinternals Tools Not Working
Previous video: Inspecting Process Explorer Traffic With Fiddler
Inspecting Process Explorer Traffic With Fiddler
Tools: Fiddler, Process Explorer
ISC diary entry: Heads-up: VirusTotal Functionality in Sysinternals Tools Not Working
Analyzing FireEye Maldocs
Tools: oledump.py, numbers-to-string.py
Sample: 41b70737fa8dda75d5e95c82699c2e9b
ISC diary entry: Analyzing FireEye Maldocs
