Completed
HKCR with HKCU Extensions
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
To Catch a Spy - Tyler Hudak
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 Vault7 "Year Zero" Wikileaks Dump
- 3 Prerequisites
- 4 IFEO
- 5 Sticky Keys Backdoor
- 6 Logging - Registry Auditing
- 7 Windows Shell
- 8 Registering an Extension
- 9 Shell Extension Persistence
- 10 Malicious Extension
- 11 HKCR with HKCU Extensions
- 12 Forensic Examination
- 13 DLL Search Order
- 14 Exploitation
- 15 Detection - Examine Loaded DLLs
- 16 Windows Boot Sequence
- 17 Bootkit
- 18 Carperb Capabilities
- 19 VBR Verification
- 20 Hollowing
- 21 Advantages
- 22 Detection - Volatility - hollowfind
- 23 Resources
