oasec1

Help

1

James, I've been getting this error and cant seem to resolve it i'm running this under windows. Ive installed the constants module using pip install constants. This was also successful....

I've been playing with this issue for awhile, and apologies for the lengthy delay. It's an issue of the backing file being encrypted, but Procmon does have the ability to use virtual memory for the live data. Do you have a sample that you can test against, or provide hash for so I can test?

10

I've been playing with this issue for awhile, and apologies for the lengthy delay. It's an issue of the backing file being encrypted, but Procmon does have the ability to...

PML file being encrypted by malware

2

I'm still encountering these issue daily with ransomware. What are you thoughts about adding an option to just eliminate the extension of the output file altogether? Many of the samples...

question regarding procmon.pmc configuration file name and extenstion

1

Is it possible for you to make it so that you're able to change the name and extension of the procmon configuration file? We're analyzing malware and would like to...

Help im getting this error

13

I got this error while attempting to run the sample; robert@ubuntu:/opt/pm_shredder$ sudo cat YO\ this\ is\ BAD\ !\ \ \ FW-\ Voice\ Message.eml | ./shredder.py Traceback (most recent call last):...

this issue is back. See below

4


Exiting with error code: 8: Error creating PML

3

Here's an added twist. This only happens occasionally. Thoughts? [*] Termination of Procmon commencing... please wait [*] Running cmdline: "c:\tools\procmon.exe" /Terminate [*] Procmon terminated [*] Checking for existence of file:...