<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Microsoft &#8211; Cerbero Blog</title>
	<atom:link href="https://blog.cerbero.io/tag/microsoft/feed/" rel="self" type="application/rss+xml" />
	<link>https://blog.cerbero.io</link>
	<description></description>
	<lastBuildDate>Thu, 27 Nov 2025 10:03:55 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.0</generator>

<image>
	<url>https://blog.cerbero.io/wp-content/uploads/2023/09/cropped-pro_icon_512-32x32.png</url>
	<title>Microsoft &#8211; Cerbero Blog</title>
	<link>https://blog.cerbero.io</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">184292133</site>	<item>
		<title>XST Format Package</title>
		<link>https://blog.cerbero.io/xst-format-package/</link>
					<comments>https://blog.cerbero.io/xst-format-package/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Thu, 27 Nov 2025 10:03:55 +0000</pubDate>
				<category><![CDATA[Package]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Forensic]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[OST]]></category>
		<category><![CDATA[Outlook]]></category>
		<category><![CDATA[PST]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3288</guid>

					<description><![CDATA[We released the XST Format package, which adds support for Microsoft Outlook PST and OST email data formats. The package makes it possible to explore every part of an email container, including messages, folder structures, metadata and attachments.]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/xst-format-package/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3288</post-id>	</item>
		<item>
		<title>DotNET ManifestResources Format Package</title>
		<link>https://blog.cerbero.io/dotnet-manifestresources-format-package/</link>
					<comments>https://blog.cerbero.io/dotnet-manifestresources-format-package/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Thu, 04 Apr 2024 10:06:38 +0000</pubDate>
				<category><![CDATA[Package]]></category>
		<category><![CDATA[.NET]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[resources]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=2975</guid>

					<description><![CDATA[We have released the DotNET ManifestResources Format package for all licenses of Cerbero Suite. .NET manifest resources are embedded elements within .NET assemblies, used to store additional data such as files, icons, and strings that an application requires for execution. These resources are directly compiled into the executable, becoming a part of the application’s core &#8230; <a href="https://blog.cerbero.io/dotnet-manifestresources-format-package/" class="more-link">Continue reading<span class="screen-reader-text"> "DotNET ManifestResources Format Package"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/dotnet-manifestresources-format-package/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">2975</post-id>	</item>
		<item>
		<title>OneNote Format 2.0 Package</title>
		<link>https://blog.cerbero.io/onenote-format-2-0-package/</link>
					<comments>https://blog.cerbero.io/onenote-format-2-0-package/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Thu, 11 Jan 2024 12:54:08 +0000</pubDate>
				<category><![CDATA[Package]]></category>
		<category><![CDATA[Document]]></category>
		<category><![CDATA[Microsoft]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=2907</guid>

					<description><![CDATA[We have released version 2 of the OneNote Format package. This latest version introduces numerous enhancements and expands the scope of information extraction capabilities. In this update, we&#8217;ve focused particularly on improving the utility for forensic analysis, ensuring that you can extract more detailed information from OneNote documents.]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/onenote-format-2-0-package/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">2907</post-id>	</item>
		<item>
		<title>RegHive Format Package</title>
		<link>https://blog.cerbero.io/reghive-format-package/</link>
					<comments>https://blog.cerbero.io/reghive-format-package/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Fri, 17 Nov 2023 07:53:26 +0000</pubDate>
				<category><![CDATA[Package]]></category>
		<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Registry]]></category>
		<category><![CDATA[We have released the DSStore Format package for all licenses of Cerbero Suite.]]></category>
		<category><![CDATA[windows]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=2863</guid>

					<description><![CDATA[We have released the RegHive Format package for all licenses of Cerbero Suite. This package offers enhanced functionality for exploring Windows Registry hives. It enables detailed inspection of keys and values, and importantly, provides additional insights by displaying the last modification date and time for each key. Moreover, it includes the ability to view security &#8230; <a href="https://blog.cerbero.io/reghive-format-package/" class="more-link">Continue reading<span class="screen-reader-text"> "RegHive Format Package"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/reghive-format-package/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">2863</post-id>	</item>
		<item>
		<title>Microsoft Office DDE Detection</title>
		<link>https://blog.cerbero.io/microsoft-office-dde-detection/</link>
					<comments>https://blog.cerbero.io/microsoft-office-dde-detection/#comments</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Wed, 10 Jan 2018 14:21:58 +0000</pubDate>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Suite Standard]]></category>
		<category><![CDATA[DDE]]></category>
		<category><![CDATA[Macro]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Office]]></category>
		<guid isPermaLink="false">http://cerbero-blog.com/?p=1701</guid>

					<description><![CDATA[In this article we&#8217;re not going to discuss how DDE works, there are plenty of excellent resources about this topic already (also here and here). Instead we&#8217;re going to see how to inspect DDE field codes in Profiler. In fact, the upcoming 2.9 version of Profiler comes with detection of DDE field codes. So let&#8217;s &#8230; <a href="https://blog.cerbero.io/microsoft-office-dde-detection/" class="more-link">Continue reading<span class="screen-reader-text"> "Microsoft Office DDE Detection"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/microsoft-office-dde-detection/feed/</wfw:commentRss>
			<slash:comments>2</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">1701</post-id>	</item>
	</channel>
</rss>
