Shlomi Boutnaru, Ph.D.The Networking Journey — Star TopologyIn a star topology every device on the network is connected to a central device. As opposed to a mesh topology in which every device on…1d ago1d ago
Shlomi Boutnaru, Ph.D.The Windows Process Journey — “bitsadmin.exe” (BITS administration utility)“bitadmin.exe” is a binary PE file located at “%windir%\system32\bitsadmin.exe”. It is used in order to create download/upload jobs while…2d ago2d ago
Shlomi Boutnaru, Ph.D.The Linux Concept Journey — Block Device FileAs we know the philosophy of Linux is that “Everything is a file”. However, not all files are created equally. A block device file is one…3d ago3d ago
Shlomi Boutnaru, Ph.D.The Linux Process Journey — “ata_sff” (Advanced Technology Attachment Small Form Factor)“ata_sff” is a Linux kernel thread which is based on a workqueue…4d ago4d ago
Shlomi Boutnaru, Ph.D.The Windows Concept Journey — Mandatory User ProfileA “Mandatory User Profile” is a special type of a “Roaming User Profile”…5d ago5d ago
Shlomi Boutnaru, Ph.D.The Windows Concept Journey — “BITS” (Background Intelligent Transfer Service)BITS (Background intelligent Transfer Service) allows asynchronously transferring files in the foreground\background while controlling the…6d ago6d ago
Shlomi Boutnaru, Ph.D.The Linux Kernel Macro Journey — “__cleanup”The “__cleanup” macro is based on “__attribute__” (https://medium.com/@boutnaru/the-attribute-keyword-2ee44f59ab25), it is defined as part…Aug 7Aug 7
Shlomi Boutnaru, Ph.D.The Windows Process Journey — “reg.exe” (Registry Console Tool)“reg.exe” (Registry Console Tool) is a binary PE file located at “%windir%\system32\reg.exe”. It is a command line utility which is used…Aug 6Aug 6
Shlomi Boutnaru, Ph.D.The Windows Forensic Journey — “FirstFolder” (First Folder Presented During Open/Save As)The goal of the “FirstFolder” registry key is to track the application’s first folder that is presented to the user during an Open or Save…Aug 4Aug 4
Shlomi Boutnaru, Ph.D.The Windows Forensic Journey — “CIDSizeMRU”“CIDSizeMRU” is a registry subkey of “ComDlg32” which is located in…Aug 4Aug 4