https://mikehorn-git.github.io/tags/volatility3/ Recent content in Volatility3 on Mike.Horn Hugo en Sat, 28 Sep 2024 00:00:00 +0200 https://mikehorn-git.github.io/writeups/cyberdefenders/reveal/ Sat, 28 Sep 2024 00:00:00 +0200 https://mikehorn-git.github.io/writeups/cyberdefenders/reveal/ <h1 id="q1-what-action-did-alex-take-to-integrate-the-purported-time-saving-package-into-the-deployment-process-provide-the-full-command">Q1: What action did Alex take to integrate the purported time-saving package into the deployment process? (provide the full command)</h1> <p>Review the PowerShell history file:</p> <blockquote> <p><code>ConsoleHost_history.txt</code></p> </blockquote> <p>Look for commands related to NuGet package installation.</p> <p><img alt="History" loading="lazy" src="./2024-09-22T22:56:27,889083437+02:00.png"></p> <p>Identify the full command used to install the package.</p> <hr> <h1 id="q2-identify-the-url-from-which-the-package-was-downloaded-">Q2: Identify the URL from which the package was downloaded ?</h1> <p>Examine the <strong>web browsing history</strong> on the system.</p> <p><img alt="Url" loading="lazy" src="./2024-10-13T18_19_20,030404275+02_00.png"></p> <p>Locate the URL used to download the NuGet package.</p>