Reverse, Reveal, Recover: Windows Defender Quarantine Forensics
Tags
attack-pattern: Data Malicious File - T1204.002 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002
Show in Graph
Common Information
Type Value
UUID fce0b0c6-7bfa-4f40-8feb-926ad54cd431
Fingerprint 9cc388115136558e
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 14, 2023, 7:13 a.m.
Added to db Aug. 31, 2024, 12:08 a.m.
Last updated Dec. 18, 2024, 8:04 p.m.
Headline Reverse, Reveal, Recover: Windows Defender Quarantine Forensics
Title Reverse, Reveal, Recover: Windows Defender Quarantine Forensics
Detected Hints/Tags/Attributes 39/1/5
Source URLs
Redirection Url
Details Source https://blog.fox-it.com/2023/12/14/reverse-reveal-recover-windows-defender-quarantine-forensics/
URL Provider
Details Provider Source level domain
Details fox-it.com blog.fox-it.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 34 ✔ Fox-IT International blog https://blog.fox-it.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 5 
dissect.target
Details File 13 
mpengine.dll
Details File 3 
dissect.cs
Details File 5 
dissect.tar
Details IPv6 3 
e::add