Set TOR Exit Node – TOR Browser, Country Code, Specific Node
How to set TOR Exit Node in TOR Browser for specific Country using Country Codes or set specific Exit Node from any country and check the applied settings
Security
Check Phishing Links – Enterprise Security Department Guide
How to Check Phishing Links in Enterprise before engaging takedown with registrar. Check if link is malicious and what to do if the content isn’t available
Check Suspicious Links for Legitimacy – Observation, Tools
How to Check Suspicious Links from emails or other sources for Legitimacy with Common Sense Observation and Online Tools (DNS, IP Reputation)
BIFF Command Viewer for Microsoft OLE Excel XLS – BiffView++
BIFF Command Viewer usage Guide – “BiffView++” shows the structure of older Microsoft Excel XLS file format (OLE structure / Compound File Binary container)
OfficeMalScanner – Microsoft Office Files Malware Scanner
Learn how to use OfficeMalScanner – Microsoft Office Malware Scanner (Word / Excel / PowerPoint) for Malicious Macros, PE. Including Usage examples and tips
Unhide Hidden Excel Sheets – ExcelSheetUnhide
Malicious Hidden Excel Spreadsheets went popular lately using Excel 4 Macros. ExcelSheetUnhide Powershell script will Unhide Hidden Excel Sheets
Python Oletools Setup, Use – Microsoft Office File Analysis
This guide will help you setup python oletools by Decalage and show you some usage examples. Oletools are used to analyze types of Microsoft Office Files
Imphash usage in Malware Analysis – Categorizing Malware
Imphash usage can help you categorize Malware to a certain adversary or a Malware family. You will learn how to install and use imphash in Malware analysis
Extract VBA Macro from Microsoft Word and Excel – oledump
In this guide you will understand how to setup and use Didier Stevens oledump python tool to Extract VBA Macro from Microsoft Excel / Word / Office files
What is SvcHost – Cyber Security Threat Analysis Guide
Comprehensive guide on SvcHost internals. Cyber Security Threat Analysis: how to find what hides behind it and is it malicious or a legitimate process