AlterNET Form Designer is a .NET component library that provides a quick and convenient way to create graphical user interfaces.


Form Designer lets users create user interfaces by adding controls to a design surface, arranging them, and writing code to handle their events. There are two versions of the Forms Designer: one designed for WinForms applications and the other for WPF applications. These versions employ distinct methods for designing visual interfaces, saving design content, and running the created forms.
| Phase | Key Actions | |-------|--------------| | | Create Jump Bag, establish legal authority, hash known good files. | | Detection | EDR alerts (Carbon Black, CrowdStrike, SentinelOne), SIEM correlation. | | Initial Triage | Collect RAM, $MFT, Event Logs ($LogFile, $UsnJrnl), Prefetch, Shimcache. | | Time Stomping Check | Compare $STANDARD_INFORMATION (SI) vs $FILE_NAME (FN) timestamps. | | Persistence Hunting | Run keys, Scheduled Tasks, Services, WMI subscriptions, Boot Execute. | | Containment | Network isolation, kill chain interruption, credential reset. |
This is the standard index. Every tool, every artifact, every acronym.
A visual control that displays controls and components that you can drag to the Form Designer surface.
It features a set of collapsible tabs, enabling application developers to customize which components and controls, including third-party controls, are displayed in the toolbox.

A visual control providing a hierarchical structure of all elements tht belong to the design form.
Outline control allows users to select individual controls for modification, drag-n-drop, and displaying their properties.

| Phase | Key Actions | |-------|--------------| | | Create Jump Bag, establish legal authority, hash known good files. | | Detection | EDR alerts (Carbon Black, CrowdStrike, SentinelOne), SIEM correlation. | | Initial Triage | Collect RAM, $MFT, Event Logs ($LogFile, $UsnJrnl), Prefetch, Shimcache. | | Time Stomping Check | Compare $STANDARD_INFORMATION (SI) vs $FILE_NAME (FN) timestamps. | | Persistence Hunting | Run keys, Scheduled Tasks, Services, WMI subscriptions, Boot Execute. | | Containment | Network isolation, kill chain interruption, credential reset. |
This is the standard index. Every tool, every artifact, every acronym. for508 index