Microsoft office crypto info
Using Docrecrypt
Different type of office version
http://www.techrepublic.com/article/how-netbios-name-resolution-really-works/
Method execution, OS, Process, Data
Active Directory Security
Window log event ID reference
Windows
Certificate creation
Microsoft Office
Microsoft office crypto info
Using Docrecrypt
Different type of office version
WinRM
PS-Remoting
Lateral movement
SMB
NetBios
http://www.techrepublic.com/article/how-netbios-name-resolution-really-works/
Patch Identification
.Net RSA Encryption
Powershell
Batch command
WMI Persistency
SQLCMD
WMIC
Method execution, OS, Process, Data
NTLM
Memory Forensic
Windows
Active Directory Security
Event logs
Window log event ID reference
Exchange server
Kerberos
Sysinternals
NTDS.dit
IIS Control