A PE file’s export directory contains information about the functions and variables exported from the executable.
This is commonly used in DLL files. For example, kernel32.dll exports CreateFileA.
Export Directory
0001-01-01 pe
A PE file’s export directory contains information about the functions and variables exported from the executable.
This is commonly used in DLL files. For example, kernel32.dll exports CreateFileA.
DOS Header
0001-01-01 pe
Data Directory
0001-01-01 pe
Dynamic Link Library
0001-01-01 pe windows
File Header
0001-01-01 pe
Linux Persistence: Startup Scripts
2024-11-10 DFIR CTF linux persistence systemd SysV init startup script
Linux Persistence: Cron
2024-11-10 DFIR CTF linux persistence cron
Linux Persistence: User Accounts
2021-06-27 DFIR linux persistence