Difference between revisions of "Expand"
Jump to navigation
Jump to search
| Line 72: | Line 72: | ||
| [[Type_Adobe_PDF]] | | [[Type_Adobe_PDF]] | ||
| Artifacts | | Artifacts | ||
| + | |- | ||
| + | | [[Type_Internet_Explorer_History]] | ||
| + | | Artifacts, [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_SQLite_Database]] | ||
| + | | Artifacts, Files, [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_PNG]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_Firefox_Form_History]] | ||
| + | | Artifacts, [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_Firefox_Downloads]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_Firefox_Web_Sites_Visited]] | ||
| + | | Artifacts, [[Type_File_Details|File Details]] | ||
|} | |} | ||
Revision as of 10:52, 22 July 2020
| Executable | Expand.exe
|
| Stage | 3 |
| Percent Complete | 48% |
| Message Queue | expand
|
Expand is the most capable exploitation process. It produces files and artifacts.
Capabilities
Expand exploits the following file types.
| File Type | Produces |
|---|---|
| Type_Physical_Artifacts | Artifacts |
| Type_ASCII_Text | File Details |
| Type_JPEG | Artifacts, File Details |
| Type_JPEGWithExif | Artifacts, EXIF, File Details |
| Type_GIF | File Details |
| Type_PE | File Details |
| Type_ZIP | Files, File Details |
| Type_32bit_Windows_Executable | Files, File Details |
| Type_64bit_Windows_Executable | Files, File Details |
| Type_ROM_Windows_Executable | Files, File Details |
| Type_Word_2007 | Artifacts, File Details |
| Type_Excel_2007 | Artifacts, File Details |
| Type_PowerPoint_2007 | Artifacts, File Details |
| Type_Microsoft_ESE | File Details |
| Type_MPEG4Video | Artifacts, EXIF, File Details, Locations |
| Type_Adobe_PDF | Artifacts |
| Type_Internet_Explorer_History | Artifacts, File Details |
| Type_SQLite_Database | Artifacts, Files, File Details |
| Type_PNG | File Details |
| Type_Firefox_Form_History | Artifacts, File Details |
| Type_Firefox_Downloads | File Details |
| Type_Firefox_Web_Sites_Visited | Artifacts, File Details |
