If you knew me as an old name elsewhere: hi. I am here as this handle. I still will not take samples in DMs.
Continuity of people, not of drama.
Refs: ATT&CK
Lab / educational. Public binaries and patched classes only. Isolated VM.
If you knew me as an old name elsewhere: hi. I am here as this handle. I still will not take samples in DMs.
Continuity of people, not of drama.
Refs: ATT&CK
Lab / educational. Public binaries and patched classes only. Isolated VM.
Came back to this after a coffee. Still hold. You wrote «If you knew me as an old name elsewhere: hi». That is the sentence I keep. If you DM samples I will not open them. I will +rep a listing and ârep a vibe. That is the deal.
@flux
Came back to this after a coffee. Still hold. You wrote «If you knew me as an old name elsewhere: hi». That is the sentence I keep. If you D
I ran this on a licensed corpus binary. «Retirement of a handle, hello from the same human» â specifically If you knew me as an old name elsewhere: hi. If you DM samples I will not open them. I still have the snapshot named gene-327-pre.
@adewale_k
I ran this on a licensed corpus binary. «Retirement of a handle, hello from the same human» â specifically If you knew me as an old name els
Decompiler output is a hypothesis. Treat it like one. I dumped after OEP and then did this. On «Retirement of a handle, hello from the same human»: If you knew me as an old name elsewhere: hi. Do not recruit in DMs. Market listing or nothing. If anyone DMs me a zip I will not open it. Hash in-thread.
Not fully convinced yet. The load-bearing line: If you knew me as an old name elsewhere: hi. Date the screenshot and put the Ghidra version in the post. Did you force-create the function or did auto-analysis luck into it? Same class as the March thread, different binary.
@bayo_k
Not fully convinced yet. The load-bearing line: If you knew me as an old name elsewhere: hi. Date the screenshot and put the Ghidra version
Not fully convinced yet. On «Retirement of a handle, hello from the same human»: If you knew me as an old name elsewhere: hi. Date the screenshot and put the Ghidra version in the post. I wrote a 12-line script and then threw it away. The listing was enough.
I reproduced it twice before I believed you. On «Retirement of a handle, hello from the same human»: If you knew me as an old name elsewhere: hi. Defenders belong here. Detections are first-class. Version in my shot: current lab snapshot, not last year's blog.
@byte
I reproduced it twice before I believed you. On «Retirement of a handle, hello from the same human»: If you knew me as an old name elsewhere
That insult was not a technical point. I am reporting it. This matches a public n-day class from last patch Tuesday. «Retirement of a handle, hello from the same human» â specifically If you knew me as an old name elsewhere: hi. Do not recruit in DMs. Market listing or nothing. I will +rep a listing and ârep a vibe. That is the deal.
@christopherx
This matches a public n-day class from last patch Tuesday. «Retirement of a handle, hello from the same human» â specifically If you knew me
I reproduced it twice before I believed you. On «Retirement of a handle, hello from the same human»: If you knew me as an old name elsewhere: hi. Date the screenshot and put the Ghidra version in the post. Version in my shot: current lab snapshot, not last year's blog.
Quietly the best note on this board this month. «Retirement of a handle, hello from the same human» â specifically If you knew me as an old name elsewhere: hi. Quote the bytes or it is a vibe. What did you key the join on â PID or process GUID? I still have the snapshot named gene-327-pre.