DisARMS

Named by 2 kept items in this workspace.

1 items name it under classification.key entities and 1 under tools.

Search every workspace for DisARMS. It matches the name as written, so it can find other things that share it.

The items that name it 2

AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key
writeupas classification.key entities2026-09-10
AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance
articleas tools2026-09-08
Prior research tool/technique (Grothe, Mainka, Rösler & Schwenk, WOOT '16, MSRC Case 33210) for client-side protection removal via the MSIPC SDK, a different surface from the server-side key extraction covered in this series

All technologies in this workspace.