Difference between revisions of "Expand"
Jump to navigation
Jump to search
| Line 1,124: | Line 1,124: | ||
| 7045 || Service Installed || [[Event Types|EVENT_TYPE_SERVICE_INSTALLED]]<br />[[Type_Shell_Script]] | | 7045 || Service Installed || [[Event Types|EVENT_TYPE_SERVICE_INSTALLED]]<br />[[Type_Shell_Script]] | ||
|- | |- | ||
| − | | 8001 || WiFi Data | + | | 8001 || WiFi Data || [[Entity Types|ENTITY_TYPE_MAC_ADDRESS]]<br />[[Entity Types|ENTITY_TYPE_SSID]]<br />[[Event Types|EVENT_TYPE_CONNECTED_TO_NETWORK]] |
|- | |- | ||
| − | | 8003 || WiFi Data | + | | 8003 || WiFi Data || [[Entity Types|ENTITY_TYPE_SSID]]<br />[[Event Types|EVENT_TYPE_DISCONNECTED_FROM_NETWORK]] |
|- | |- | ||
| − | | 11001 || WiFi Data | + | | 11001 || WiFi Data || [[Entity Types|ENTITY_TYPE_MAC_ADDRESS]]<br />[[Entity Types|ENTITY_TYPE_SSID]] |
|- | |- | ||
| − | | 20001 || USB Data | + | | 20001<br />20003<br />24576<br />24577 || USB Data || [[Entity Types|ENTITY_TYPE_SERIAL_NUMBER]]<br />[[Event Types|EVENT_TYPE_USB_INSERTED]] |
|- | |- | ||
| − | | | + | | 50067 || WiFi Data || [[Entity Types|ENTITY_TYPE_SSID]]<br />[[Event Types|EVENT_TYPE_CONNECTED_TO_NETWORK]] |
| − | |||
| − | |||
| − | | | ||
| − | | | ||
| − | |||
| − | |||
|} | |} | ||
Revision as of 06:41, 2 June 2024
| Executable | Expand.exe
|
| Stage | 3 |
| Percent Complete | 48% |
| Message Queue | expand
|
Expand is the most capable exploitation process. It produces files and artifacts.
Capabilities
File Types
Expand processes the following types of files.
Event Log Records
Expand processes the following event log record numbers
