Difference between revisions of "Expand"
Jump to navigation
Jump to search
| Line 180: | Line 180: | ||
| [[Type_3G2_Video]] | | [[Type_3G2_Video]] | ||
| [[Type_File_Details|File Details]] | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_GZip]] | ||
| + | | Files | ||
| + | |- | ||
| + | | [[Type_Bitmap_Image]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_TIFF]] | ||
| + | | [[EXIF Table|EXIF]] | ||
| + | |- | ||
| + | | [[Type_Cellebrite_1]] | ||
| + | | [[Entity Table|Artifacts]], [[Event Table|Events]] | ||
| + | |- | ||
| + | | [[Type_Cellebrite_2]] | ||
| + | | [[Entity Table|Artifacts]], [[Event Table|Events]] | ||
| + | |- | ||
| + | | [[Type_MPEG2Video]] | ||
| + | | [[EXIF Table|EXIF]] | ||
| + | |- | ||
| + | | [[Type_Windows_Registry]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_SAM_Registry]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_System_Registry]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_Boot_Registry]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_User_Registry]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_Software_Registry]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_Vista7_Thumbnail_Cache]] | ||
| + | | Files | ||
| + | |- | ||
| + | | [[Type_Microsoft_Cabinet]] | ||
| + | | Files | ||
|} | |} | ||
Revision as of 11:39, 22 July 2020
| Executable | Expand.exe
|
| Stage | 3 |
| Percent Complete | 48% |
| Message Queue | expand
|
Expand is the most capable exploitation process. It produces files and artifacts.
Capabilities
Expand exploits the following file types.
