Conventions used

There are a number of text conventions used throughout this book.

Code in text: Indicates code words in text, registry keys, folder names, filenames, file extensions, pathnames.

Here is an example: “The following screenshot shows an example of using wmic and process call create to execute code on a remote host.”

A block of code is set as follows:

<?xml version="1.0" encoding="UTF-16"?>
<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

  <RegistrationInfo>
    <Date>2021-11-02T18:14:01</Date>
    <Author>DESKTOP\user</Author>
    <URI>\WindowsNT\WindowsUACDialog\CleanupTask</URI>
  </RegistrationInfo>

Any command-line input or output is written as follows:

Tshark -i  <capture interface> -w <output file>

Bold: Indicates a new term, an important word, or words that you see onscreen. For instance, words in menus or dialog boxes appear in bold.

Here is an example: “Create Account and Valid Accounts are very popular techniques that can be used for persistence.”

Note

Appear like this.