0x55aa

0x55aa

Home
Archive
About
EC2 IAM role STS credentials compromise via IMDS
Exploring how temporary credentials obtained through AWS Instance Metadata Service can be extracted and used both inside and outside EC2 instances, and…
Feb 22 • 
Ilya Kobzar
3
4
Revisiting ShellBags in Windows 11
Does Windows 11 treat ShellBags differently?
Feb 15 • 
Ilya Kobzar
1

January 2025

LevelDB WAL log - extracting ChatGPT conversations
Write-ahead log analysis
Jan 31 • 
Ilya Kobzar
4
3
Diving into Master Boot Record
Parsing the sector 0
Jan 26 • 
Ilya Kobzar
1
Behavioral analysis of user file operations with SRUM
Unveiling forensic insights and pitfalls of SRUM data
Jan 16 • 
Ilya Kobzar
2

September 2021

Windows updates and anti-forensics (part 1, USB devices)
In these series of posts I will be talking about feature pack updates for Windows 10 operating system and how they affect computer forensic…
Sep 9, 2021 • 
Ilya Kobzar
4
2
© 2025 Ilya Kobzar
Privacy ∙ Terms ∙ Collection notice
Start writingGet the app
Substack is the home for great culture