Pages

▼
Wednesday, August 17, 2005

Linux vs Windows TCO

›
There's an interesting article by Lauro DiDio over on NewsFactor about the Linux vs. Windows Total Cost of Ownership (TCO) argument. The...
5 comments:

Industry_Insider article

›
An article I wrote appeared in the MS Industry Insider blog recently. The article is about two misconceptions I see in the IT world when it...
2 comments:
Monday, August 15, 2005

GMU2005 presentations updated!

›
Well, the first day of GMU2005 went off without a hitch. Sunday evening I updated my presentations...nothing major, just a bullet here, a ...
2 comments:
Friday, August 12, 2005

GMU2005 presentations posted!!

›
I finally received approval for public release of my presentations for GMU2005 ...which starts Monday. ;-) Ugh...don't even... There a...
Thursday, August 11, 2005

FRUC INI files

›
If you're currently using the FSPC/FRUC tools, what would you think about posting your INI files for others to see?

An explanation of the FSPC and the FRUC

›
Okay, so I posted my updates of the FRUC yesterday, and I'm glad I got that out of the way. But I probably need to give an explanation ...
2 comments:
Wednesday, August 10, 2005

FRUC Updated!!

›
Finally! I finally completed my development and testing of an updated version of the First Responder Utility (Commandline) , the data collec...
Tuesday, August 09, 2005

A web site in an alternate data stream

›
A new blog by Inge Henriksen of Norway was pointed out to me today, and the posts so far are very interesting. One of the posts describes ...

USB blocking software

›
I ran across this NetworkWorld article on USB blocking software products, by Ellen Messmer , this morning. There's not a whole lot of i...
2 comments:
Monday, August 08, 2005

Hashing code updates

›
Jesse Kornblum has updated md5deep , so head on over and pick up your copy. The tools include hashing programs for MD5, SHA-1, SHA-256, Tig...

MSRC Strider HoneyMonkey Project

›
I ran across the MS Security Response Center's ( MSRC blog ) Strider HoneyMonkey project this morning...very interesting stuff. From the...
Thursday, August 04, 2005

Analysis of a Win2K rootkit

›
I ran across this site recently (can't remember where I originally got the link) and finally got around to actually reading through it. ...

MS Office 2003 Redaction tool

›
I got an email this morning about a tool released by MS called the " Office 2003 Redaction Tool ". This tool is an Office 2003 ad...
Wednesday, August 03, 2005

Process monitoring and malware analysis

›
As part of looking into ways of improving malware analysis, I got to thinking about some things. For instance, some malware may maintain enc...
10 comments:
Tuesday, August 02, 2005

iPod info

›
I was doing my monthly check of the e-Evidence.info site this morning, and I ran across an interesting article on how iPods are used as har...
4 comments:
Monday, August 01, 2005

Training Poll

›
A while ago, I posted about a training course based on my book . Since then, I've received emails from folks, asking about when such a ...
Thursday, July 21, 2005

A/V software on web servers, revisited

›
The subject thread I've been following and contributing to has proved to be interesting, to say the least, and the most interesting aspe...
3 comments:

Training

›
I recently had someone contact me, someone who had read my book and wanted to see about attending my course . Well, one way to do that woul...
3 comments:
Tuesday, July 19, 2005

A/V software on web servers

›
There's an interesting thread over on the SecurityFocus Focus-MS list, regarding the installation of anti-virus software on IIS 6.x web ...
6 comments:
Monday, July 18, 2005

Bots writing Registry entries

›
As I've purused some of the anti-virus sites of late, I've noticed a trend that malware...specifically, bots...are writing two parti...