A fake domain—cff-explorer[.]com—has been registered to impersonate CFF Explorer. It currently appears as the top or second (depending on language) Google result when searching for CFF Explorer . The only legitimate domain is ntcore.com.
If, just like me, you re fascinated by memory forensics, you might be interested in the new Memory Analysis package for Cerbero Suite developed by my company. The package supports analyzing memory dumps from Windows XP up to Windows 11, on both x86 and x64 systems, and is designed to make complex forensic tasks simpler and Continue reading "Windows Memory Analysis"
I ve been playing with Rust for a while now. With a few thousands lines of Rust code under my belt I can t by any means claim to be an expert, but I ve formed a few opinions on it. I mostly like its syntax very much. It s refreshing compared to many other languages out there. I Continue reading "Rust for closed-source projects"
I ve been meaning to learn the Rust language for quite some years and found only now the time to start this endeavor. I must say it has probably been for the best, as the language has clearly matured a lot since the last time I looked into it. As a first project to try out Continue reading "Porting a CHIP-8 emulator to Rust"
Not a very common topic for me, but I thought it could be neat to mention some tips tricks. I won t go into the details of the Python GIMP SDK, most of it can be figured out from the GIMP documentation. I spent a total of one hour researching this topic, so I m not Continue reading "Batch image manipulation using Python and GIMP"
To restart my career as a technical writer, I chose a light topic. Namely, running applications compiled with new versions of Visual Studio on Windows XP. I didn t find any prior research on the topic, but I also didn t search much. There s no real purpose behind this article, beyond the fact that I wanted to Continue reading "Time Travel: Running Python 3.7 on XP"
After over a decade, I finally took two afternoons to revamp this personal web-page and to merge the content of the old NTCore page with the content of its blog (rcecafe.net). All the URLs of the old web-page and blog have been preserved in the process. The people who voted for this on Twitter are Continue reading "NTCore revamped"
Perhaps the content of this post is trivial and widely known(?), but I just spent some time fixing a bug related to the following C++ behavior. Let s take a look at this code snippet: // main.cpp ------------------------------ #include void bar(); void foo(); int main(int argc, const char *argv[]) { bar(); foo(); return 0; } // Continue reading "Ctor conflicts"
This post isn t about upcoming features, it s about things you can already do with Cerbero. What we ll see is how to import structures used for file system analysis from C/C++ sources, use them to analyze raw hex data, create a script to do the layout work for us in the future and at the end Continue reading "Raw File System Analysis (FAT32 File Recovery)"