<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>cab &#8211; Cerbero Blog</title>
	<atom:link href="https://blog.cerbero.io/tag/cab/feed/" rel="self" type="application/rss+xml" />
	<link>https://blog.cerbero.io</link>
	<description></description>
	<lastBuildDate>Mon, 30 May 2022 17:52:53 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>

<image>
	<url>https://blog.cerbero.io/wp-content/uploads/2023/09/cropped-pro_icon_512-32x32.png</url>
	<title>cab &#8211; Cerbero Blog</title>
	<link>https://blog.cerbero.io</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">184292133</site>	<item>
		<title>CAB &#038; Certificates SDK Documentation</title>
		<link>https://blog.cerbero.io/cab-certificates-sdk-documentation/</link>
					<comments>https://blog.cerbero.io/cab-certificates-sdk-documentation/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Mon, 30 May 2022 17:49:14 +0000</pubDate>
				<category><![CDATA[Engine]]></category>
		<category><![CDATA[Suite Advanced]]></category>
		<category><![CDATA[Suite Standard]]></category>
		<category><![CDATA[cab]]></category>
		<category><![CDATA[Certificates]]></category>
		<category><![CDATA[DER]]></category>
		<category><![CDATA[PEM]]></category>
		<category><![CDATA[pkcs7]]></category>
		<category><![CDATA[X509]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=2418</guid>

					<description><![CDATA[Having already completed the SDK documentation of our core modules, we have started documenting our file format modules and just finished the first two. Namely, we have documented the API for parsing Microsoft Cabinet files. And we have documented our comprehensive API for parsing certificate files in both DER and PEM encodings. We&#8217;ll continue documenting &#8230; <a href="https://blog.cerbero.io/cab-certificates-sdk-documentation/" class="more-link">Continue reading<span class="screen-reader-text"> "CAB &#038; Certificates SDK Documentation"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/cab-certificates-sdk-documentation/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">2418</post-id>	</item>
		<item>
		<title>Malicious Windows Link with Embedded Microsoft Cabinet</title>
		<link>https://blog.cerbero.io/malicious-windows-link-with-embedded-microsoft-cabinet/</link>
					<comments>https://blog.cerbero.io/malicious-windows-link-with-embedded-microsoft-cabinet/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Thu, 10 Sep 2020 04:28:53 +0000</pubDate>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Suite Advanced]]></category>
		<category><![CDATA[cab]]></category>
		<category><![CDATA[Cabinet]]></category>
		<category><![CDATA[Link]]></category>
		<category><![CDATA[lnk]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Reversing]]></category>
		<guid isPermaLink="false">https://cerbero-blog.com/?p=1893</guid>

					<description><![CDATA[You can find the original analysis for this malware at malwarebytes. As a bonus, in the video we show how to improve the static analysis of the final payload by resolving API calls. This script converts the decrypted blob hashes into a call index → api name dictionary. blob = bytes([ 0x6B, 0x65, 0x72, 0x6E, &#8230; <a href="https://blog.cerbero.io/malicious-windows-link-with-embedded-microsoft-cabinet/" class="more-link">Continue reading<span class="screen-reader-text"> "Malicious Windows Link with Embedded Microsoft Cabinet"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/malicious-windows-link-with-embedded-microsoft-cabinet/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">1893</post-id>	</item>
		<item>
		<title>MSI support</title>
		<link>https://blog.cerbero.io/msi-support/</link>
					<comments>https://blog.cerbero.io/msi-support/#respond</comments>
		
		<dc:creator><![CDATA[Alessandro Gario]]></dc:creator>
		<pubDate>Tue, 10 Jan 2012 20:00:09 +0000</pubDate>
				<category><![CDATA[Suite Standard]]></category>
		<category><![CDATA[cab]]></category>
		<category><![CDATA[cfbf]]></category>
		<category><![CDATA[compound file binary format]]></category>
		<category><![CDATA[msi]]></category>
		<category><![CDATA[windows installer]]></category>
		<guid isPermaLink="false">http://blog.icerbero.com/?p=84</guid>

					<description><![CDATA[Even though CAB file support is still under development, the CFBF parser already lets us inspect Windows Installer packages and patches. Having such feature comes in handy when you want to analyse their contents, and eliminates the need for external tools. In the screenshot above, I&#8217;ve selected one of the DLLs that link to MSI &#8230; <a href="https://blog.cerbero.io/msi-support/" class="more-link">Continue reading<span class="screen-reader-text"> "MSI support"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/msi-support/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">84</post-id>	</item>
	</channel>
</rss>
