Investigating WMI Backdoors in Windows With Loki Yara Scanner | TryHackMe Investigating Windows 2.0

[@aronora4636]

I was looking for exactly this! Great video again

[@The3aazf]

I would grateful if please share the notes regarding the blue team

[@destructioncorp]

Any tips on parsing string values other than being unique info? Think I should google them online? For instance I almost chose mscoree.dll as a string for the yara rule.

[@monagamoudi6598]

min 29:45 bleep out the bad word