My write up for a Memory Forensics/DFIR  chall for Macos
▲ 23 r/digitalforensics+2 crossposts

My write up for a Memory Forensics/DFIR chall for Macos

https://mooofin.github.io/portfolio/blog/s4nct1m0ny.html

tuts for ISF from kernel DWARF. for vol as well . loginwindow plaintext credential extraction, Chainbreaker 3DES keychain decryption, and full RE of a Swift dropper using machine Hardware UUID as decryption key , ive tried to make it very less jargon and reader friendly

u/mewwwfinnn — 1 day ago

i made a modern treesitter editor smaller than your neovim config :3

https://preview.redd.it/cvviudmp213h1.png?width=915&format=png&auto=webp&s=11cf941e2eccc52229d8ff8006fd9576a54737fb

10 rewrites later i replaced half the c++ standard library ,finally landing on a compiler-optimized constexpr lookup table setup , ended up being 37kb at the end from 1.2 mb

docs:
https://mooofin.github.io/honeymoon/index.html

source:
https://github.com/mooofin/honeymoon

reddit.com
u/mewwwfinnn — 1 month ago