https://garrettoh.dev/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/posts/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/categories/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/tags/dfir/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/tags/dotnet/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/posts/txt_to_process_hollowing/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/tags/incident-response/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/tags/malware-analysis/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/tags/process-hollowing/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/tags/reverse-engineering/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/categories/security-writeups/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/tags/ 2026-08-17T00:00:00+00:00 https://garrettoh.dev/posts/multihydrator/ 2026-08-04T00:00:00+00:00 https://garrettoh.dev/tags/accessbroker/ 2026-08-04T00:00:00+00:00 https://garrettoh.dev/tags/incidentresponse/ 2026-08-04T00:00:00+00:00 https://garrettoh.dev/tags/malware/ 2026-08-04T00:00:00+00:00 https://garrettoh.dev/tags/persistence/ 2026-08-04T00:00:00+00:00 https://garrettoh.dev/categories/threat-research/ 2026-08-04T00:00:00+00:00 https://garrettoh.dev/tags/threathunting/ 2026-08-04T00:00:00+00:00 https://garrettoh.dev/tags/atomic-red-team/ 2026-05-13T00:00:00+00:00 https://garrettoh.dev/posts/atomicredteamlab/ 2026-05-13T00:00:00+00:00 https://garrettoh.dev/tags/ir/ 2026-05-13T00:00:00+00:00 https://garrettoh.dev/categories/lab/ 2026-05-13T00:00:00+00:00 https://garrettoh.dev/tags/powershell/ 2026-05-13T00:00:00+00:00 https://garrettoh.dev/categories/security/ 2026-05-13T00:00:00+00:00 https://garrettoh.dev/categories/dfir/ 2026-05-06T00:00:00+00:00 https://garrettoh.dev/tags/incident-report/ 2026-05-06T00:00:00+00:00 https://garrettoh.dev/tags/mesh-agent/ 2026-05-06T00:00:00+00:00 https://garrettoh.dev/posts/mesh_agent_rmm_dfir/ 2026-05-06T00:00:00+00:00 https://garrettoh.dev/tags/rmm/ 2026-05-06T00:00:00+00:00 https://garrettoh.dev/posts/fingerclickfix/ 2026-04-20T00:00:00+00:00 https://garrettoh.dev/showcase/ 2026-04-20T00:00:00+00:00 https://garrettoh.dev/about/ 2026-04-19T00:00:00+00:00 https://garrettoh.dev/notes/500-hacking/05_active_directory/ 2025-09-25T00:00:00+00:00 https://garrettoh.dev/notes/500-hacking/05_active_directory/04_domain_escalation/04_adcs/ 2025-09-25T00:00:00+00:00 https://garrettoh.dev/notes/500-hacking/ 2025-09-25T00:00:00+00:00 https://garrettoh.dev/notes/ 2025-09-25T00:00:00+00:00 https://garrettoh.dev/notes/500-hacking/01_enumeration/139_445_smb/ https://garrettoh.dev/notes/500-hacking/01_enumeration/161_snmp/ https://garrettoh.dev/notes/500-hacking/01_enumeration/21_ftp/ https://garrettoh.dev/notes/500-hacking/01_enumeration/22_ssh/ https://garrettoh.dev/notes/500-hacking/01_enumeration/53_dns/ https://garrettoh.dev/notes/500-hacking/01_enumeration/80_443_web/ https://garrettoh.dev/notes/500-hacking/01_enumeration/aws/ https://garrettoh.dev/notes/500-hacking/01_enumeration/initial-recon/ https://garrettoh.dev/notes/500-hacking/01_enumeration/linux-enumeration-commands/ https://garrettoh.dev/notes/500-hacking/01_enumeration/windows-enumeration-commands/ https://garrettoh.dev/notes/500-hacking/02_initial_access/02_web/csrf/ https://garrettoh.dev/notes/500-hacking/02_initial_access/02_web/sqli/ https://garrettoh.dev/notes/500-hacking/02_initial_access/02_web/ssrf/ https://garrettoh.dev/notes/500-hacking/02_initial_access/02_web/stti/ https://garrettoh.dev/notes/500-hacking/02_initial_access/02_web/xss/ https://garrettoh.dev/notes/500-hacking/03_privilege_escalation/linux_privesc/ https://garrettoh.dev/notes/500-hacking/03_privilege_escalation/windows_privesc/ https://garrettoh.dev/notes/500-hacking/04_pivoting_and_tunneling/ligolo-ng/ https://garrettoh.dev/notes/500-hacking/04_pivoting_and_tunneling/pivoting-and-tunneling-gipidy/ https://garrettoh.dev/notes/500-hacking/05_active_directory/01_ad_enumeration/01_unauthenticated/ https://garrettoh.dev/notes/500-hacking/05_active_directory/02_credential_access/05_kerberoasting/ https://garrettoh.dev/notes/500-hacking/05_active_directory/02_credential_access/06_as-rep_roasting/ https://garrettoh.dev/notes/500-hacking/05_active_directory/03_lateral_movement/02_authenticated_low_priv/ https://garrettoh.dev/notes/500-hacking/05_active_directory/03_lateral_movement/03_lateral_movement/ https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/file_transfers/ https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/hashcat-and-john/ https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/random-commands/ https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/tty_upgrades/ https://garrettoh.dev/notes/project-notes/atomiclabpowershell/ https://garrettoh.dev/writeups/flareon-12/01-drill-baby-drill/ https://garrettoh.dev/writeups/flareon-12/02-project-chimera/ https://garrettoh.dev/writeups/flareon-12/03-pretty-devilish-file/ https://garrettoh.dev/writeups/flareon-12/04-unholydragon/ https://garrettoh.dev/writeups/flareon-12/05-ntfsm/ https://garrettoh.dev/writeups/flareon-12/06-chat-client/ https://garrettoh.dev/writeups/flareon-12/07-the-boss-needs-help/ https://garrettoh.dev/writeups/flareon-12/08-flare-authenticator/ https://garrettoh.dev/writeups/flareon-12/09-10000/ https://garrettoh.dev/notes/500-hacking/01_enumeration/ https://garrettoh.dev/writeups/flareon-12/ https://garrettoh.dev/notes/500-hacking/02_initial_access/ https://garrettoh.dev/writeups/nsa-cbc-25/ https://garrettoh.dev/notes/500-hacking/04_pivoting_and_tunneling/ https://garrettoh.dev/notes/500-hacking/03_privilege_escalation/ https://garrettoh.dev/notes/project-notes/ https://garrettoh.dev/notes/500-hacking/06_cheatsheets_and_payloads/ https://garrettoh.dev/writeups/nsa-cbc-25/task-01/ https://garrettoh.dev/writeups/nsa-cbc-25/task-02/ https://garrettoh.dev/writeups/nsa-cbc-25/task-03/ https://garrettoh.dev/writeups/nsa-cbc-25/task-04/ https://garrettoh.dev/writeups/nsa-cbc-25/task-05/ https://garrettoh.dev/writeups/nsa-cbc-25/task-06/ https://garrettoh.dev/writeups/nsa-cbc-25/task-07/ https://garrettoh.dev/notes/500-hacking/02_initial_access/02_web/ https://garrettoh.dev/writeups/