:root{color-scheme:light dark;--bg:#e4ecf1;--sheet:#f6f9fb;--text:#1b2630;--muted:#4a5a67;--head:#1f4a66;--line:#74899a;--link:#1a5a86;--focus:#1a5a86;--select:#c9dcea;--tap:#1a5a8633;--ok:#2c6a55;--bad:#a12a2a;--wide:60rem;--prose:40rem;-webkit-text-size-adjust:100%;text-size-adjust:100%;font-size:100%}@media (prefers-color-scheme:dark){:root{--bg:#111922;--sheet:#18222d;--text:#e4ecf1;--muted:#a8b7c3;--head:#9ed6c8;--line:#5f7486;--link:#8ccbec;--focus:#8ccbec;--select:#2b4459;--tap:#8ccbec40;--ok:#9ed6c8;--bad:#f2a7a0}}*{box-sizing:border-box}body{background:var(--bg);color:var(--text);overflow-wrap:anywhere;hanging-punctuation:first;padding:1.25rem max(1rem, env(safe-area-inset-right)) max(1.5rem, env(safe-area-inset-bottom)) max(1rem, env(safe-area-inset-left));margin:0;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,system-ui,sans-serif;font-size:1.0625rem;line-height:1.55}.sheet{max-width:var(--wide);background:var(--sheet);border:1px solid var(--line);border-radius:8px;margin:0 auto;padding:1.25rem 1.15rem 1.75rem}.sheet.prose{max-width:var(--prose)}.skip{left:max(.5rem, env(safe-area-inset-left));background:var(--sheet);padding:.5rem .75rem;position:absolute;top:.5rem;transform:translateY(-150%)}.skip:focus,.skip:focus-visible{z-index:2;transform:none}main:focus{outline:none}:focus-visible{outline:2px solid var(--focus);outline-offset:2px}h1,h2,h3,.brand{color:var(--head);text-wrap:balance;scroll-margin-top:1rem;font-family:ui-serif,Georgia,serif;font-weight:650;line-height:1.25}h1{letter-spacing:-.015em;margin:0 0 .35rem;font-size:2rem;line-height:1.1}h2{margin:2rem 0 .6rem;font-size:1.25rem}h3{margin:1.25rem 0 .35rem;font-size:1.05rem}p{text-wrap:pretty;margin:.7rem 0}.lede{margin:0 0 1rem;font-size:1.15rem}h2+.lede{color:var(--muted);font-size:1rem}a{color:var(--link);text-underline-offset:.15em;-webkit-tap-highlight-color:var(--tap);text-decoration:underline}ul,ol{margin:.4rem 0 .8rem;padding-left:1.2rem}li{margin:.2rem 0}header.site{flex-wrap:wrap;justify-content:space-between;align-items:baseline;gap:0 1rem;margin-bottom:1rem;display:flex}.brand{margin:0;font-size:1.15rem}.brand a{color:inherit;text-decoration:none}.sections{flex-wrap:wrap;gap:.15rem .35rem;margin:0 0 .5rem;padding:0;list-style:none;display:flex}.sections li{margin:0}.sections a{color:inherit;align-items:center;min-width:44px;min-height:44px;padding:.2rem .35rem;display:inline-flex}.sections a[aria-current=page]{color:var(--link)}.tasks,.cards{gap:.25rem 1.5rem;margin:.5rem 0 1rem;padding:0;list-style:none;display:grid}@media (width>=48rem){.tasks,.cards{grid-template-columns:1fr 1fr}}.tasks li,.cards li{margin:0}.tasks a,.card{min-height:44px;color:inherit;padding:.4rem 0;text-decoration:none;display:block}.tasks strong,.card strong{color:var(--link);text-underline-offset:.15em;font-weight:600;text-decoration:underline;display:block}.card p,.tasks span{color:var(--muted);margin:.1rem 0 0;display:block}.chips{flex-wrap:wrap;gap:.15rem .35rem;margin:.5rem 0 1rem;display:flex}.chips label{cursor:pointer;align-items:center;min-height:44px;padding:0 .35rem;display:inline-flex}.chips input{opacity:0;width:1px;height:1px;position:absolute}.chips input:focus-visible+span{outline:2px solid var(--focus);outline-offset:2px}.chips input:checked+span{color:var(--link);text-underline-offset:.25em;text-decoration:underline 2px}body:has(#dom-dfir:checked) .card:not([data-domain~=dfir]),body:has(#dom-networking:checked) .card:not([data-domain~=networking]),body:has(#dom-systems:checked) .card:not([data-domain~=systems]),body:has(#dom-windows:checked) .card:not([data-domain~=windows]),body:has(#dom-cloud:checked) .card:not([data-domain~=cloud]),body:has(#dom-web:checked) .card:not([data-domain~=web]),body:has(#dom-malware:checked) .card:not([data-domain~=malware]){display:none}.scroll{border:1px solid var(--line);border-radius:6px;max-width:100%;overflow-x:auto}table{border-collapse:collapse;overflow-wrap:break-word;width:100%;min-width:36rem;font-size:.95rem}th,td{text-align:left;vertical-align:top;border-bottom:1px solid var(--line);padding:.45rem .6rem}th{color:var(--head);font-weight:600}tr:last-child td{border-bottom:0}caption{text-align:left;color:var(--muted);padding:.5rem .6rem}fieldset{border:1px solid var(--line);border-radius:6px;margin:1rem 0}label.field{margin:.8rem 0;display:block}label.field span,legend{margin-bottom:.25rem;display:block}input,textarea,select,button{font:inherit;color:var(--text);background:var(--bg);border:1px solid var(--line);border-radius:6px;font-size:1rem}input,select,textarea{width:100%;max-width:40rem;padding:.55rem .6rem}input[type=file]{padding:.45rem .6rem}input[type=checkbox],input[type=radio]{width:auto;accent-color:var(--link)}textarea{min-height:8rem}textarea,pre,code,.out{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:.9rem}button{background:var(--link);min-height:44px;color:var(--sheet);border-color:var(--link);cursor:pointer;-webkit-tap-highlight-color:var(--tap);padding:.4rem .9rem}button.secondary{color:var(--link);background:0 0}pre,.out{white-space:pre-wrap;overflow-wrap:anywhere;background:var(--bg);border:1px solid var(--line);border-radius:6px;max-width:100%;padding:.8rem}.note{color:var(--muted)}.ok{color:var(--ok);font-weight:700}.bad{color:var(--bad);font-weight:700}.row{flex-wrap:wrap;align-items:center;gap:.5rem;display:flex}.hit{outline:2px solid var(--focus)}.filter{max-width:24rem;margin:.5rem 0 1rem}.tool-head{margin:.5rem 0 1rem}button.small{min-height:32px;padding:.15rem .55rem;font-size:.85rem}td button.small{margin-left:.25rem}.callout{border-left:4px solid var(--line);background:var(--bg);padding:.4rem .75rem}.callout.info{border-color:var(--link)}.callout.warn{border-color:var(--head)}.callout.bad{border-color:var(--bad);color:var(--bad)}.purpose{border-left:4px solid var(--link);padding:.4rem .75rem}.summary{font-weight:600}.summary:empty{display:none}td.meaning{color:var(--muted);font-size:.9rem}th[scope=row]{white-space:nowrap}.table-block{margin:1rem 0}.table-block>.row{margin-top:.4rem}details.raw{margin:1rem 0}details.raw summary{cursor:pointer;min-height:44px;color:var(--link);align-items:center;display:flex}fieldset.mode{flex-wrap:wrap;align-items:center;gap:.25rem 1rem;padding:.4rem .75rem;display:flex}fieldset.mode legend{margin:0;padding:0 .25rem}fieldset.mode label{cursor:pointer;align-items:center;gap:.35rem;min-height:44px;display:inline-flex}.tabs{border-bottom:1px solid var(--line);flex-wrap:wrap;gap:.25rem;margin:1rem 0 .5rem;display:flex}.tabs [role=tab]{color:var(--link);background:0 0;border:0;border-bottom:3px solid #0000;border-radius:0}.tabs [role=tab][aria-selected=true]{border-bottom-color:var(--link);color:var(--text);font-weight:600}.drop{border:2px dashed var(--line);border-radius:6px;padding:.75rem}.drop.over{border-color:var(--link);background:var(--select)}ol.rows{padding-left:1.5rem}ol.rows>li{border-bottom:1px solid var(--line);padding:.4rem 0}ol.rows input,ol.rows select{flex:10rem;width:auto}mark{background:var(--select);color:var(--text);outline:1px solid var(--link)}.related{columns:2 14rem}.grid-out{grid-template-columns:repeat(auto-fit,minmax(11rem,1fr));gap:.5rem;display:grid}.stat{border:1px solid var(--line);border-radius:6px;padding:.5rem .75rem}.stat span{color:var(--muted);font-size:.85rem;display:block}.stat code{font-size:1rem}footer.site{border-top:1px solid var(--line);color:var(--muted);margin-top:2rem;padding-top:.75rem;font-size:.95rem}::selection{background:var(--select);color:var(--text)}@media (prefers-contrast:more){.sheet{border-width:2px}a{text-decoration-thickness:2px}}@media print{:root{color-scheme:light;--bg:#fff;--sheet:#fff;--text:#000;--muted:#000;--head:#000;--link:#000;--line:#000;--focus:#000}body{padding:0}.sheet{border:0;max-width:none}.skip,header.site nav,.chips,button{display:none}}.diff .add{color:var(--ok)}.diff .del{color:var(--bad)}.diff strong{text-decoration:underline}.answer{white-space:pre-line}button.secondary[aria-pressed=true]{background:var(--link);color:var(--sheet)}.results{max-height:60vh;padding:0;list-style:none;overflow-y:auto}.results li{border-radius:4px;padding:.35rem .5rem}.results li[aria-selected=true]{outline:2px solid var(--focus)}.results a{display:block}#search-palette{border:1px solid var(--link);background:var(--sheet);width:min(42rem,100vw - 32px);color:inherit;padding:1rem}#search-palette::backdrop{background:#0006}
/*$vite$:1*/