Joe Mikhail

simple parse and rebuild of calc.exe

9

Following the tutorial directions, I cannot do a simple parse and rebuild of calc.exe and other binaries. self.fileParsed = lief.parse(theFile) builder = lief.PE.Builder(self.fileParsed) # Configure it to rebuild and patch...

logging nt kernel logger or windows kernel trace

5

When logging nt kernel logger or windows kernel trace providers, there are no results. Any tips?

The kernel keyword doesnt appear to be working. When i specify 'All', i only get a subset of all the categories. When I specify tcpipnetwork i dont get any network...

Number of packets is incorrect

1

I started using joy to process a simple TLS flow but noticed the number of packets shown does not match the number of packets in wireshark. There should be a...