Pages

▼
Sunday, November 29, 2009

Incident Preparation

›
In the course of my work, I will often encounter a customer's computer security incident response plan, or CSIRP ... often , not always....
2 comments:
Wednesday, November 25, 2009

More Timeline Creation Techniques

›
Some of you may have seen (or be using) the timeline tools I released within the Win4n6 Yahoo group and included in my most recent Hakin9 ...
2 comments:
Sunday, November 22, 2009

Even More Linky Goodness...

›
Tools I received an email recently that let me know that the latest version of RevealerToolkit is available, a project from a Barcelona sec...
2 comments:
Wednesday, November 18, 2009

Working with Volume Shadow Copies

›
To begin with, let me say right up front that most of the information in this post, particularly the latter half, is not something that I d...
17 comments:
Saturday, November 14, 2009

It's about time...

›
Sometimes you need a tool, and you just don't have one available to do the thing you need done. Recently, I was doing some analysis, and...
5 comments:
Friday, November 13, 2009

Some Analysis Coolness

›
TimeLine Analysis The most recent issue of Hakin9 is available now...my second article on timeline creation and analysis is in this one; it...
Wednesday, November 11, 2009

In The News

›
The Register is reporting that bot masters have hidden a control channel in the Google cloud via AppEngine. Interesting article, take a re...
10 comments:

Happy Birthday, VMI!

›
I know, another off-topic blog post, but this should the last one for a while! The Virginia Military Institute was established on 11 Nov 18...
Tuesday, November 10, 2009

Happy Birthday, Marines!

›
This is usually a technical blog, but I wanted to take a moment to recognize the service and sacrifice of all current and former Marines on...
1 comment:
Monday, November 09, 2009

p0wnage

›
A little over a month ago, I purchased a Dell Inspiron 1545 from the Dell Refurbished shelf. Most of the systems I've purchased from De...
6 comments:

More Linky Goodness, plus

›
I attended one day of the NetWitness User Conference last week, and ran into Richard Bejtlich there. Richard posted some of his thoughts ...
Wednesday, November 04, 2009

Link-alicious

›
Thanks to Rob Lee's tweets, I read about AccessData 's new Registry Summary Reports recently. These seem like baby RegRipper plugi...
5 comments:
Tuesday, November 03, 2009

The Future of RegRipper

›
You may have been wondering why, over the past months, I've been mentioning various plugins (or you may not, I don't know...), but t...
2 comments:
Monday, November 02, 2009

Into The Boxes

›
Into The Boxes is a new e-mag (first issue due out in Jan, 2010) covering issues concerning the Digital Forensics and Incident Response (DF...
2 comments:
Tuesday, October 27, 2009

Linkware

›
F-Response 3.09.05 is out! With this version comes "Compatible with Windows 7" status, as well as additional platform support (i...

File Extensions and Programs

›
Now and again in the lists, you'll see a post asking about a file extension, and what program it "belongs" to or what it does....
2 comments:
Friday, October 23, 2009

Free Tools

›
I've seen requests in several listservs for listings of free tools that people use during examinations, and most often, the response is ...
21 comments:
Wednesday, October 21, 2009

Windows 7 and the Future of Forensic Analysis

›
Okay, so I was in Redmond, WA, last week at some computer conferences (yes, plural) and was on-stage with Troy Larson while he waxed philoso...
5 comments:
Tuesday, October 20, 2009

Timeline Creation Tools

›
As time progresses, we look at the tools we have available to us, tweak those that we have, and maybe look for new capabilities, creating ne...
2 comments:
Friday, October 16, 2009

Challenges

›
What challenges do you face in Windows forensic analysis?
3 comments: