Interesting Kix for post-ex. ~~The package is a dll so it can potentially be loaded reflectively.~~ Unclear how this can be loaded in memory..
## Tweets
- https://twitter.com/subtee/status/1583584393389449216
<blockquote class="twitter-tweet"><p lang="en" dir="ltr">Tweet mini plot drama:<br><br>Tl;dr<a href="https://t.co/ZNk17gn7FL">https://t.co/ZNk17gn7FL</a><br><br>Kix scripts start dumping lsass. <br><br>We have the very best EDR detection engineers money can buy.<br><br>Narrator: they did not yet know about kix scripts.<br><br>Its older code, but checks out.<br><br>CISO goes sailing in Bahamas with vendor. <a href="https://t.co/4pgFHYGgwg">pic.twitter.com/4pgFHYGgwg</a></p>— Casey Smith (@subtee) <a href="https://twitter.com/subtee/status/1583584393389449216?ref_src=twsrc%5Etfw">October 21, 2022</a></blockquote>
- https://twitter.com/subtee/status/1583584411248795649
<blockquote class="twitter-tweet"><p lang="en" dir="ltr">We pay $$ for all this defense.<br>We are safe. <br><br>Narrator: they were not.<br><br>Silence falls across the cube farm as threat hunters gasp.<br><br>What’s KIX?<br><br>They faint. They grab their regex. Its … Its COM!!!<br><br>Its too. Late.<br><br>The enemy is here, they have been for decades. <a href="https://t.co/WYfd3w2kqK">pic.twitter.com/WYfd3w2kqK</a></p>— Casey Smith (@subtee) <a href="https://twitter.com/subtee/status/1583584411248795649?ref_src=twsrc%5Etfw">October 21, 2022</a></blockquote>
## Links
- http://kixtart.org/