<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>PE &#8211; Cerbero Blog</title>
	<atom:link href="https://blog.cerbero.io/tag/pe/feed/" rel="self" type="application/rss+xml" />
	<link>https://blog.cerbero.io</link>
	<description></description>
	<lastBuildDate>Tue, 09 Jul 2024 06:45:50 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.0</generator>

<image>
	<url>https://blog.cerbero.io/wp-content/uploads/2023/09/cropped-pro_icon_512-32x32.png</url>
	<title>PE &#8211; Cerbero Blog</title>
	<link>https://blog.cerbero.io</link>
	<width>32</width>
	<height>32</height>
</image> 
<site xmlns="com-wordpress:feed-additions:1">184292133</site>	<item>
		<title>.NET Decompiler Package</title>
		<link>https://blog.cerbero.io/net-decompiler-package/</link>
					<comments>https://blog.cerbero.io/net-decompiler-package/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Tue, 09 Jul 2024 06:45:50 +0000</pubDate>
				<category><![CDATA[Package]]></category>
		<category><![CDATA[.NET]]></category>
		<category><![CDATA[decompiler]]></category>
		<category><![CDATA[MSIL]]></category>
		<category><![CDATA[PE]]></category>
		<category><![CDATA[Portable Executable]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=3030</guid>

					<description><![CDATA[We&#8217;re excited to release the DotNET Decompiler package for all licenses of Cerbero Suite: this package is capable of decompiling .NET assemblies from their bytecode back to C#. Once you have installed the package, you can access the decompiler from the bytecode view. The interface provides a quick filter to show only matching namespaces, classes, &#8230; <a href="https://blog.cerbero.io/net-decompiler-package/" class="more-link">Continue reading<span class="screen-reader-text"> ".NET Decompiler Package"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/net-decompiler-package/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3030</post-id>	</item>
		<item>
		<title>Microsoft Authenticode on Linux and macOS</title>
		<link>https://blog.cerbero.io/microsoft-authenticode-on-linux-and-macos/</link>
					<comments>https://blog.cerbero.io/microsoft-authenticode-on-linux-and-macos/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Thu, 14 Apr 2022 08:00:09 +0000</pubDate>
				<category><![CDATA[Engine]]></category>
		<category><![CDATA[Suite Advanced]]></category>
		<category><![CDATA[Certificates]]></category>
		<category><![CDATA[Cryptography]]></category>
		<category><![CDATA[PE]]></category>
		<category><![CDATA[Portable Executable]]></category>
		<category><![CDATA[windows]]></category>
		<guid isPermaLink="false">https://blog.cerbero.io/?p=2378</guid>

					<description><![CDATA[With the upcoming releases customers with commercial licenses for Cerbero Suite Advanced and Cerbero Engine can verify Microsoft Authenticode signatures on Linux and macOS. Our Authenticode support includes full-chain certificate and time-stamp verification. In conjunction with our recently extended support for certificate file formats, this provides complete support for inspecting signed Portable Executable binaries. The &#8230; <a href="https://blog.cerbero.io/microsoft-authenticode-on-linux-and-macos/" class="more-link">Continue reading<span class="screen-reader-text"> "Microsoft Authenticode on Linux and macOS"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/microsoft-authenticode-on-linux-and-macos/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">2378</post-id>	</item>
		<item>
		<title>PE Insider</title>
		<link>https://blog.cerbero.io/pe-insider/</link>
					<comments>https://blog.cerbero.io/pe-insider/#comments</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Mon, 12 Aug 2013 09:30:22 +0000</pubDate>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Free]]></category>
		<category><![CDATA[PE]]></category>
		<category><![CDATA[Portable Executable]]></category>
		<category><![CDATA[Tool]]></category>
		<category><![CDATA[Utility]]></category>
		<category><![CDATA[Viewer]]></category>
		<guid isPermaLink="false">http://cerbero-blog.com/?p=1228</guid>

					<description><![CDATA[It is always nice to give something back to the community and although this is unfortunately not always possible, we&#8217;re happy to announce the release of PE Insider, a free PE viewer which shares the same codebase for inspection as Cerbero Profiler and hence supports the entire PE specification and is incredibly fast and stable. &#8230; <a href="https://blog.cerbero.io/pe-insider/" class="more-link">Continue reading<span class="screen-reader-text"> "PE Insider"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/pe-insider/feed/</wfw:commentRss>
			<slash:comments>16</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">1228</post-id>	</item>
		<item>
		<title>Validation of Portable Executable resources</title>
		<link>https://blog.cerbero.io/validation-of-portable-executable-resources/</link>
					<comments>https://blog.cerbero.io/validation-of-portable-executable-resources/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Sun, 29 Jul 2012 09:41:30 +0000</pubDate>
				<category><![CDATA[Suite Standard]]></category>
		<category><![CDATA[PE]]></category>
		<category><![CDATA[Portable Executable]]></category>
		<category><![CDATA[resources]]></category>
		<category><![CDATA[validation]]></category>
		<guid isPermaLink="false">http://blog.icerbero.com/?p=641</guid>

					<description><![CDATA[One of the new features of the upcoming 0.8.6 version of the Profiler is the validation of resources. This means the Profiler verifies the integrity of resources and lets the user inspect problems, making it easy to discover things like appended files or fake resources. This feature comes handy since very often malware is hidden &#8230; <a href="https://blog.cerbero.io/validation-of-portable-executable-resources/" class="more-link">Continue reading<span class="screen-reader-text"> "Validation of Portable Executable resources"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/validation-of-portable-executable-resources/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">641</post-id>	</item>
		<item>
		<title>PE analysis (part 1)</title>
		<link>https://blog.cerbero.io/pe-analysis-part-1/</link>
					<comments>https://blog.cerbero.io/pe-analysis-part-1/#comments</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Fri, 15 Jun 2012 11:33:53 +0000</pubDate>
				<category><![CDATA[Suite Standard]]></category>
		<category><![CDATA[Analysis]]></category>
		<category><![CDATA[PE]]></category>
		<category><![CDATA[Portable Executable]]></category>
		<guid isPermaLink="false">http://blog.icerbero.com/?p=446</guid>

					<description><![CDATA[This is the first of a series of posts which will be dedicated to PE analysis features. In previous posts we have seen how the Profiler has started supporting PE as a format and while it still lacks support for a few directories (and .NET), it supports enough of them for x86 PE analysis. While &#8230; <a href="https://blog.cerbero.io/pe-analysis-part-1/" class="more-link">Continue reading<span class="screen-reader-text"> "PE analysis (part 1)"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/pe-analysis-part-1/feed/</wfw:commentRss>
			<slash:comments>1</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">446</post-id>	</item>
		<item>
		<title>Resource &#038; Load Config Directory</title>
		<link>https://blog.cerbero.io/resource-load-config-directory/</link>
					<comments>https://blog.cerbero.io/resource-load-config-directory/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Tue, 22 May 2012 17:51:37 +0000</pubDate>
				<category><![CDATA[Suite Standard]]></category>
		<category><![CDATA[PE]]></category>
		<category><![CDATA[Resource Directory]]></category>
		<guid isPermaLink="false">http://blog.icerbero.com/?p=409</guid>

					<description><![CDATA[The upcoming 0.8.3 version of the Profiler features two new directories. Most of the work went into implementing an efficient model view controller for the Resource Directory tree. Last year I was notified by Ange Albertini that his resourceloop.exe sample crashed the CFF Explorer (by exhausting the stack). Recursion is one of the things to &#8230; <a href="https://blog.cerbero.io/resource-load-config-directory/" class="more-link">Continue reading<span class="screen-reader-text"> "Resource &#038; Load Config Directory"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/resource-load-config-directory/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">409</post-id>	</item>
		<item>
		<title>Portable Executable: coming soon</title>
		<link>https://blog.cerbero.io/portable-executable-coming-soon/</link>
					<comments>https://blog.cerbero.io/portable-executable-coming-soon/#respond</comments>
		
		<dc:creator><![CDATA[Erik Pistelli]]></dc:creator>
		<pubDate>Sat, 21 Apr 2012 15:16:38 +0000</pubDate>
				<category><![CDATA[Suite Standard]]></category>
		<category><![CDATA[PE]]></category>
		<category><![CDATA[Portable Executable]]></category>
		<category><![CDATA[Profiler]]></category>
		<guid isPermaLink="false">http://blog.icerbero.com/?p=367</guid>

					<description><![CDATA[In the upcoming 0.8.1 release of the Profiler initial support for PE files has been introduced. 🙂 Most of the work went into optimizing the UI and allowing for complex custom views to be built easily, while maintaining great speed. Even the grid control you can see here displayed is a custom control. In the &#8230; <a href="https://blog.cerbero.io/portable-executable-coming-soon/" class="more-link">Continue reading<span class="screen-reader-text"> "Portable Executable: coming soon"</span></a>]]></description>
		
					<wfw:commentRss>https://blog.cerbero.io/portable-executable-coming-soon/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">367</post-id>	</item>
	</channel>
</rss>
