📘
DFIR
search
Ctrlk
  • Networking
    • Networkingchevron-right
  • Windows
    • Administrationchevron-right
    • Forensicschevron-right
    • Cheat Sheetchevron-right
    • Investigationchevron-right
    • Internalschevron-right
      • Structurechevron-right
      • Privilegeschevron-right
      • Applicationschevron-right
        • Werfault
        • Process Creation
        • Pipes
        • AMSI
        • LOLBinschevron-right
        • PowerShellchevron-right
        • LSASSchevron-right
    • Active Directorychevron-right
    • MISCchevron-right
  • Linux
    • Forensicschevron-right
    • SSH
    • Linux WebShells
    • Directories of Interest
    • Internalschevron-right
  • Enterprise Architecture
    • CI/CD Piplinechevron-right
    • Citrixchevron-right
    • Web Applicationschevron-right
    • The Cloudchevron-right
    • vSpherechevron-right
    • Containerschevron-right
    • Troubleshootingchevron-right
  • Mac
    • Forensicschevron-right
  • Attacker Information
    • Adversary Operationschevron-right
    • Actor Playbookschevron-right
    • Abused Domains
  • IR Playbook
    • Activity from Unmanaged Host
    • Recommendations
  • Reverse Engineering
    • Python - Pyinstaller
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. Windowschevron-right
  2. Internalschevron-right
  3. Applications

Werfault

Windows internals Werfault

LogoAnatomy of WerFault.exe’s Application Crash Error ReportingHelge Kleinchevron-right
LogoSilentProcessExit – quick look under the hoodHexacornchevron-right
PreviousApplicationschevron-leftNextProcess Creationchevron-right

Last updated 2 years ago