Eric Capuano on Nostr: I was today-years-old when I realized that Sysmon event 15 now captures the contents ...
I was today-years-old when I realized that Sysmon event 15 now captures the contents of the Zone.Identifier ADS, showing where a file was downloaded from 🤯
Published at
2023-09-27 22:18:12Event JSON
{
"id": "214a3642fd214caaac885dd4f682ce2255808e6df1f68efb99df8a3dc539d687",
"pubkey": "4b1abafc9d0c61a30c8f914a6c4496ce11817997fa178bd1c7f4e9c91f536ea6",
"created_at": 1695853092,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/eric_capuano/statuses/111139428271326035",
"activitypub"
]
],
"content": "I was today-years-old when I realized that Sysmon event 15 now captures the contents of the Zone.Identifier ADS, showing where a file was downloaded from 🤯\n\nhttps://media.infosec.exchange/infosecmediaeu/media_attachments/files/111/139/425/512/051/360/original/7bc7f9e2e6c57149.png",
"sig": "4daec46626f618bfc9106299b5411144dcac5b81be5d1180e00937a1cce3d5ae4317bbce7d4b88f2614bb316a034d00ed25cb1b2800921328b332a3e1900c572"
}
