Skip to content
Fox-IT International blog

Fox-IT International blog

News and opinions from Fox-IT

  • Home
  • Archive
  • Back to Fox-IT

Tag: danderspritz

Detection and recovery of NSA’s covered up tracks

Part of the NSA cyber weapon framework DanderSpritz is eventlogedit, a piece of software capable of removing individual lines from Windows Event Log files. Now that this tool is leaked and public, any criminal willing to remove its traces on a hacked computer can use it. Fox-IT has looked at the software and found a … Continue reading Detection and recovery of NSA’s covered up tracks →

Wouter Jansen Blog December 8, 2017 5 Minutes
 

Loading Comments...