amcache-evilhunter

AmCache-EvilHunter AmCache-EvilHunter는 Windows Amcache.hve 레지스트리 하이브를 파싱하고 분석하여 실행 증거, 의심스러운 실행 파일을 식별하고, 향상된 위협 인텔리전스를 위해 VirusTotal/OpenTIP 조회를 통합하는 명령줄 도구입니다. https://github.com/user-attachments/assets/e23fb99b-48ad-4260-b372-2f15e5320c74 기능 오프라인 Amcache.hve 레지스트리 하이브 파싱. 날짜 범위로 레코드 필터링 --star...

CVE-2026-70561 TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php

TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authenticated user, including low-privilege guest accounts, to read arbitrary attachments by supplying an integer attachment ID to the attachmentdownload.php handler without any project or role...

Top 5 Ways Broken Triage Increases Business Risk Instead of Reducing It

Triage is supposed to make things simpler. In a lot of teams, it does the opposite. When you can’t reach a confident verdict early, alerts turn into repeat checks, back-and-forth, and “just escalate it” calls. That cost doesn’t stay inside the SOC; it shows up as missed SLAs, higher cost per case...

Amcache Evilhunter Tool

AmCache-EvilHunter is a command-line tool to parse and analyze Windows Amcache.hve registry hives, identify evidence of execution, suspicious executables, and integrate VirusTotal/OpenTIP lookups for enhanced threat intelligence...