{"id":693,"date":"2020-09-18T22:09:46","date_gmt":"2020-09-18T13:09:46","guid":{"rendered":"https:\/\/p-0.me\/b\/?p=693"},"modified":"2020-09-18T22:53:16","modified_gmt":"2020-09-18T13:53:16","slug":"603","status":"publish","type":"post","link":"https:\/\/p-0.me\/b\/p\/603\/","title":{"rendered":"Windows\u89e3\u6790\u74b0\u5883\u69cb\u7bc9\u30e1\u30e2"},"content":{"rendered":"<p>\u6700\u8fd1\uff0c<a href=\"https:\/\/book.mynavi.jp\/ec\/products\/detail\/id=116258\">\u300e\u30ea\u30d0\u30fc\u30b9\u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u30c4\u30fc\u30ebGhidra\u5b9f\u8df5\u30ac\u30a4\u30c9\u300f<\/a>\u3068\u3044\u3046\u672c\u3092\u8aad\u3093\u3067\u3044\u308b\uff0e<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"ja\">Ghidra\u672c\u3001\u30bc\u30ed\u30c8\u30e9\u30b9\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u9752\u304f\u3066\u75db\u304f\u3066\u8106\u3044<br \/>\n\u4eca\u304b\u3089\u8aad\u3080 <a href=\"https:\/\/t.co\/LYxfRgIzGN\">pic.twitter.com\/LYxfRgIzGN<\/a><\/p>\n<p>\u2014 pome (@pome_11) <a href=\"https:\/\/twitter.com\/pome_11\/status\/1306419010829860864?ref_src=twsrc%5Etfw\">September 17, 2020<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n\u3067\uff0cWindows10+WSL\u306a\u691c\u8a3c\u74b0\u5883\u3092\u69cb\u7bc9\u3059\u308b\u3053\u3068\u3068\u3057\u305f\uff0e<\/p>\n<p>\u305d\u306e\u4f5c\u696d\u30e1\u30e2\uff0e<\/p>\n<p><!--more--><\/p>\n<p>&nbsp;<\/p>\n<h3>1.\u7528\u610f\u3059\u308b\u3082\u306e<\/h3>\n<p>Windows10 Pro\u306e\u30db\u30b9\u30c8PC (Pro\u30e9\u30a4\u30bb\u30f3\u30b9\u306a\u306e\u3067Hyper-V\u304c\u4f7f\u3048\u308b)<\/p>\n<p>&nbsp;<\/p>\n<h3>2.\u30db\u30b9\u30c8PC\u306e\u6e96\u5099<\/h3>\n<h4>2.1.Hyper-V\u306e\u6709\u52b9\u5316<\/h4>\n<p>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306f\u3057\u3066\u3044\u305f\u3082\u306e\u306e\uff0c\u4e00\u6642\u7684\u306b\u7121\u52b9\u306b\u3057\u3066\u3044\u305f\u305f\u3081\uff0c\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\uff0b\u518d\u8d77\u52d5\u3067\u6709\u52b9\u306b<\/p>\n<pre class=\"lang:default decode:true\">bcdedit \/set hypervisorlaunchtype auto<\/pre>\n<p>&nbsp;<\/p>\n<h4>2.2.Hyper-V \u30af\u30a4\u30c3\u30af\u4f5c\u6210<\/h4>\n<p>Hyper-V \u30af\u30a4\u30c3\u30af\u4f5c\u6210\u3092\u8d77\u52d5\u3059\u308b\u3068\uff0c\u4eee\u60f3\u30de\u30b7\u30f3\u306e\u4f5c\u6210\u3068\u3044\u3046\u30a6\u30a3\u30f3\u30c9\u30a6\u304c\u7acb\u3061\u4e0a\u304c\u308b\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-698\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/1.png\" alt=\"\" width=\"1764\" height=\"1530\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>\u3053\u3053\u3067[Windows 10 \u958b\u767a\u74b0\u5883]\u3092\u9078\u629e\u3057\uff0c[\u4eee\u60f3\u30de\u30b7\u30f3\u306e\u4f5c\u6210]\u30dc\u30bf\u30f3\u3092\u62bc\u4e0b\u3059\u308b\uff0e\u3053\u306eVM\u306f<a href=\"https:\/\/developer.microsoft.com\/ja-jp\/windows\/downloads\/virtual-machines\/\">\u3053\u306e\u30da\u30fc\u30b8<\/a>\u3067\u8aac\u660e\u3055\u308c\u3066\u3044\u308b\u3082\u306e\u3067\uff0cEnterprise\u306a\u306e\u3067WSL\u3082\u4f7f\u3048\u308b\uff0e\u305f\u3060\u3057\u6709\u52b9\u671f\u9650\u306f2\u30f6\u6708\uff0e\u4eca\u56de\u306f\u30d0\u30fc\u30b8\u30e7\u30f310.0.19041\u3092\u4f7f\u7528\u3057\u305f\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-699\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/2.png\" alt=\"\" width=\"1850\" height=\"1089\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>\u305d\u306e\u5f8c18GB\u307b\u3069\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u304c\u59cb\u307e\u308b\u306e\u3067\uff0c\u6c17\u9577\u306b\u5f85\u3064\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-700\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/3.png\" alt=\"\" width=\"1850\" height=\"1113\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>40\u5206\u307b\u3069\u5f85\u3063\u305f\u3042\u3068\uff0c\u30c7\u30a3\u30b9\u30af\u306e\u62bd\u51fa\u3067\u307e\u305f\u3057\u3070\u3089\u304f\u5f85\u3064\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-701\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/4.png\" alt=\"\" width=\"1850\" height=\"1113\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>8\u5206\u307b\u3069\u5f85\u3064\u3068\uff0c\u6b63\u5e38\u306b\u4f5c\u6210\u3055\u308c\u305f\u3053\u3068\u304c\u78ba\u8a8d\u3067\u304d\u308b\uff0e[\u63a5\u7d9a]\u30dc\u30bf\u30f3\u3092\u62bc\u4e0b\u3059\u308b\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-702\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/5.png\" alt=\"\" width=\"1850\" height=\"1077\" \/><\/p>\n<h3><\/h3>\n<h3>3.VM\u306e\u6e96\u5099<\/h3>\n<h4>3.1.\u8d77\u52d5<\/h4>\n<p>[\u8d77\u52d5]\u30dc\u30bf\u30f3\u3092\u62bc\u4e0b\u3059\u308b\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-703\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/6.png\" alt=\"\" width=\"1446\" height=\"1050\" \/><\/p>\n<h4><\/h4>\n<h4>3.2.\u753b\u9762\u8a2d\u5b9a<\/h4>\n<p>\u753b\u9762\u306e\u8a2d\u5b9a\u304c\u53ef\u80fd\u306a\u305f\u3081\uff0c\u898b\u3084\u3059\u3044\u3088\u3046\u306b\u30b9\u30e9\u30a4\u30c0\u30fc\u3092\u53f3\u7aef\u306b\u6301\u3063\u3066\u3044\u304d\uff0c\u5168\u753b\u9762\u8868\u793a\u3068\u3059\u308b\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-704\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/7.png\" alt=\"\" width=\"1463\" height=\"525\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>\u521d\u671f\u306e\u30c7\u30b9\u30af\u30c8\u30c3\u30d7\u306f\u3053\u306e\u3088\u3046\u306a\u5f62\uff0e\u3053\u3053\u304b\u3089\u74b0\u5883\u3092\u6574\u3048\u3066\u3044\u304f\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-717\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/1-1.png\" alt=\"\" width=\"3840\" height=\"2160\" \/><\/p>\n<h4><\/h4>\n<h4>3.3.chrome\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h4>\n<p>\u3072\u3068\u307e\u305a\u30d6\u30e9\u30a6\u30b6\u304cEdge\u3057\u304b\u5165\u3063\u3066\u3044\u306a\u3044\u305f\u3081\uff0cchrome\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/p>\n<p>&nbsp;<\/p>\n<h4>3.4.\u30ad\u30fc\u30dc\u30fc\u30c9\u30ec\u30a4\u30a2\u30a6\u30c8\u8a2d\u5b9a<\/h4>\n<p>\u521d\u671f\u72b6\u614b\u3067\u306fEnglish\u8a2d\u5b9a\u3060\u304c\uff0c\u30ad\u30fc\u30dc\u30fc\u30c9\u30ec\u30a4\u30a2\u30a6\u30c8\u304c\u4f7f\u3044\u306b\u304f\u3044\u305f\u3081\uff0c\u65e5\u672c\u8a9e\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\uff0eLanguage\u304b\u3089\u65e5\u672c\u8a9e\u3092\u8ffd\u52a0\u3059\u308b\uff0e\u8aad\u307f\u4e0a\u3052\u306a\u3069\u306f\u5fc5\u8981\u306a\u3044\u306e\u3067\u30c1\u30a7\u30c3\u30af\u3092\u5916\u3059\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-710\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/8.png\" alt=\"\" width=\"2308\" height=\"1795\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-711\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/9.png\" alt=\"\" width=\"2308\" height=\"1795\" \/><\/p>\n<h4><\/h4>\n<h4>3.5.WSL\u306e\u78ba\u8a8d<\/h4>\n<p>WSL\u306f\u521d\u671f\u304b\u3089\u4f7f\u7528\u3067\u304d\u308b\u3089\u3057\u3044\uff0ewsl(Run command)\u3068Ubuntu(App)\u3068\uff0c2\u7a2e\u985e\u306e\u8d77\u52d5\u65b9\u6cd5\u306f\u3042\u308b\u3082\u306e\u306e\uff0c\u305d\u306e\u5f8c\u306e\u52d5\u4f5c\u306b\u9055\u3044\u306f\u306a\u3055\u305d\u3046\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-718\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/2-1.png\" alt=\"\" width=\"1764\" height=\"1530\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-705\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/3-1.png\" alt=\"\" width=\"2082\" height=\"1147\" \/><\/p>\n<h4><\/h4>\n<h4>3.6.Windows Update<\/h4>\n<p>Windows Update\u3092\u884c\u3046\uff0e\u4eca\u56de\u306f2\u4ef6\u307b\u3069\u5b58\u5728\u3057\u305f\uff0e\u7d42\u308f\u3063\u305f\u3089\u518d\u8d77\u52d5\u3092\u884c\u3046<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-709\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/7-1.png\" alt=\"\" width=\"2308\" height=\"1795\" \/><\/p>\n<h4><\/h4>\n<h4>3.7.FLARE-VM\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h4>\n<p><a href=\"https:\/\/github.com\/fireeye\/flare-vm\">GitHub\u306e\u30da\u30fc\u30b8<\/a>\u304b\u3089\uff0creadme\u306b\u5f93\u3063\u3066\u4f5c\u696d\u3092\u9032\u3081\u308b\uff0eFLARE-VM\u306eVer.2.3\u3067\u306fPowerShell v3\u4ee5\u964d\u3068.NET 4.0\u4ee5\u964d\u304c\u5fc5\u8981\u3068\u306e\u3053\u3068\uff0ePowerShell\u4e0a\u306b\u3066$PSVersionTable\u3092\u78ba\u8a8d\u3059\u308b\u3068\uff0cPowerShell\u306fv5.1\u306a\u306e\u3067\u8981\u4ef6\u3092\u6e80\u305f\u3057\u3066\u3044\u308b\uff0e.NET Framework\u306b\u3064\u3044\u3066\u306f<a href=\"https:\/\/docs.microsoft.com\/ja-jp\/dotnet\/framework\/migration-guide\/how-to-determine-which-versions-are-installed\">microsoft\u306e\u30da\u30fc\u30b8<\/a>\u306b\u5f93\u3044\u30ec\u30b8\u30b9\u30c8\u30ea\u3092\u78ba\u8a8d\u3059\u308b\u3068\uff0cv4.8\u4ee5\u964d\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3067\u304d\u305f\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-706\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/4-1.png\" alt=\"\" width=\"938\" height=\"637\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-708\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/6-1.png\" alt=\"\" width=\"2856\" height=\"1520\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>\u305d\u306e\u5f8c\uff0c\u7ba1\u7406\u8005\u6a29\u9650\u306ePowerShell\u3092\u7acb\u3061\u4e0a\u3052\uff0c\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\uff0e<\/p>\n<pre class=\"lang:default decode:true\">Set-ExecutionPolicy Unrestricted\r\n.\/install.ps1<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-714\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/12.png\" alt=\"\" width=\"1842\" height=\"1667\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>\u305d\u306e\u5f8c\u3044\u304f\u3064\u304b\u8b66\u544a\u3084\u30a8\u30e9\u30fc\u304c\u51fa\u3066\u3044\u308b\u304c\uff0c\u69d8\u5b50\u3092\u898b\u3066\u307f\u308b\uff0e\u4e00\u5ea6\u518d\u8d77\u52d5\u3057\u305f\u3042\u3068\uff0cAutologin\u306b\u5fc5\u8981\u306a\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u6c42\u3081\u3089\u308c\u308b\uff0e\u306a\u305c\u304b\u9014\u4e2d\u3067Enter\u3092\u62bc\u3055\u306a\u3044\u3068\u51e6\u7406\u304c\u6b62\u307e\u308b\u90e8\u5206\u3042\u308a\uff0c\u5371\u306a\u304b\u3063\u305f\uff0e10\u6642\u9593\u5f8c\uff0c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u304c\u7d42\u4e86\u3057\u305f\uff0e<\/p>\n<p>&nbsp;<\/p>\n<p>\u672c\u3067\u306fGhidra\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u53e4\u3044\u3068\u8a18\u8f09\u3057\u3066\u3042\u3063\u305f\u304c\uff0c\u73fe\u5728\u3067\u306f\u6700\u65b0\u7248\u306ev9.1.2\u304c\u5165\u308b\u3088\u3046\u306a\u306e\u3067\uff0c\u3053\u306e\u307e\u307e\u4f7f\u3048\u308b\uff0e<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-727\" src=\"https:\/\/p-0.me\/b\/wp-content\/uploads\/2020\/09\/16.png\" alt=\"\" width=\"1115\" height=\"1547\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>\u3053\u306e\u3042\u3068\u8d77\u52d5\u3059\u308b\u3068\uff0cDELL XPS13\u306e3840\u00d72160\u306e\u30c7\u30a3\u30b9\u30d7\u30ec\u30a4\u3067\u306fUI\u306e\u6587\u5b57\u304c\u7c73\u7c92\u307f\u305f\u3044\u306b\u306a\u3063\u3066\u3057\u307e\u3063\u305f\uff0e\u3053\u306e\u89e3\u6c7a\u65b9\u6cd5\u306f\u7ba1\u7406\u8005\u6a29\u9650\u3067<\/p>\n<p>C:\\ProgramData\\chocolatey\\lib\\ghidra.fireeye\\tools\\ghidra_9.1.2_PUBLIC\\support\\launch.properties<\/p>\n<p>\u306b\u5bfe\u3057\uff0c\u4ee5\u4e0b\u306e\u4fee\u6b63\u3092\u884c\u3046\u3053\u3068\u3067\u6cbb\u308b\uff0e<\/p>\n<pre class=\"lang:default decode:true \">VMARGS=-Dfont.size.override=15<\/pre>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6700\u8fd1\uff0c\u300e\u30ea\u30d0\u30fc\u30b9\u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u30c4\u30fc\u30ebGhidra\u5b9f\u8df5\u30ac\u30a4\u30c9\u300f\u3068\u3044\u3046\u672c\u3092\u8aad\u3093\u3067\u3044\u308b\uff0e Ghidra\u672c\u3001\u30bc\u30ed\u30c8\u30e9\u30b9\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u9752\u304f\u3066\u75db\u304f\u3066\u8106\u3044 \u4eca\u304b\u3089\u8aad\u3080 pic.twitter.com\/LYxfRgIzGN \u2014 po [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-693","post","type-post","status-publish","format-standard","hentry","category-tech"],"_links":{"self":[{"href":"https:\/\/p-0.me\/b\/wp-json\/wp\/v2\/posts\/693","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/p-0.me\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/p-0.me\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/p-0.me\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/p-0.me\/b\/wp-json\/wp\/v2\/comments?post=693"}],"version-history":[{"count":16,"href":"https:\/\/p-0.me\/b\/wp-json\/wp\/v2\/posts\/693\/revisions"}],"predecessor-version":[{"id":731,"href":"https:\/\/p-0.me\/b\/wp-json\/wp\/v2\/posts\/693\/revisions\/731"}],"wp:attachment":[{"href":"https:\/\/p-0.me\/b\/wp-json\/wp\/v2\/media?parent=693"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/p-0.me\/b\/wp-json\/wp\/v2\/categories?post=693"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/p-0.me\/b\/wp-json\/wp\/v2\/tags?post=693"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}