<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>注册表取证 :: 标签 :: x7peeps</title><link>https://x7peeps.com/tags/%E6%B3%A8%E5%86%8C%E8%A1%A8%E5%8F%96%E8%AF%81/index.html</link><description/><generator>Hugo</generator><language>zh-CN</language><lastBuildDate>Tue, 16 Jun 2026 00:40:00 +0800</lastBuildDate><atom:link href="https://x7peeps.com/tags/%E6%B3%A8%E5%86%8C%E8%A1%A8%E5%8F%96%E8%AF%81/index.xml" rel="self" type="application/rss+xml"/><item><title>映像劫持与IFEO持久化取证分析</title><link>https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E6%98%A0%E5%83%8F%E5%8A%AB%E6%8C%81%E4%B8%8EIFEO%E6%8C%81%E4%B9%85%E5%8C%96%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/index.html</link><pubDate>Tue, 16 Jun 2026 00:40:00 +0800</pubDate><guid>https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E6%98%A0%E5%83%8F%E5%8A%AB%E6%8C%81%E4%B8%8EIFEO%E6%8C%81%E4%B9%85%E5%8C%96%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/index.html</guid><description>围绕 Image File Execution Options、Debugger、SilentProcessExit 与可访问性程序后门，分析 Windows 映像劫持持久化的创建态、运行态与清理方法。</description></item></channel></rss>