Windows BITS parser

[Zawadidone]

Background Intelligent Transfer Service (BITS) is used by programmers and system administrators to download files from or upload files to HTTP web servers and SMB file shares. BITS will take the cost of the transfer into consideration, as well as the network usage so that the user's foreground work has as little impact as possible. BITS also handles network interuptions, pausing and automatically resuming transfers, even after a reboot. BITS includes PowerShell cmdlets for creating and managing transfers as well as the BitsAdmin command-line utility.- https://learn.microsoft.com/en-us/windows/win32/bits/background-intelligent-transfer-service-portal

References

• https://github.com/fireeye/BitsParser
• https://github.com/ANSSI-FR/bits_parser
• https://cloud.google.com/blog/topics/threat-intelligence/attacker-use-of-windows-background-intelligent-transfer-service/