Both are included in one download through that link above. The actual recording process is done with the Recorder program but you can play the FBR video with the Player software. Reads terminal service related keys (often RDP related)Īdversaries may target user email to collect sensitive information from a target. FBR files that are FlashBack files are made and opened with the free FlashBack Express software suite (previously called BB FlashBack). Remote desktop is a common feature in operating systems. BB FlashBack Express Recorder is a helpful free program to record screen and make short videos for posting online. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.Ĭontains ability to query the machine timezoneĪdversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.Īn adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Loadable Kernel Modules (or LKMs) are pieces of code that can be loaded and unloaded into the kernel upon demand.Ĭontains ability to enumerate processes/modules/threadsĪdversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Ĭhecks a device property (often used to detect VM artifacts)

Bb flashback express 5 free text box