Pages

▼
Wednesday, December 30, 2009

Lions, and tigers, and DECAF...oh, my!

›
Most of us are aware that DECAF is back, with a new version. Ovie had interviewed Mike and posted the podcast (I'd also posted , and ...
7 comments:
Monday, December 28, 2009

Investigating Breaches, pt. II

›
As a follow-on (or one of them, anyway) to my previous post on investigating breaches , I wanted to perhaps scratch the surface a bit more (...
2 comments:

Investigating Breaches

›
I recently received an email from someone who said that he wanted to learn more about "network intrusion investigations". Seeing ...
Wednesday, December 23, 2009

Links and Stuff

›
Practicals I love stuff that is practical...stuff you can look at, follow along on, and by the end of the hour/day, have a new skill. I rec...
2 comments:
Sunday, December 20, 2009

Using RegRipper

›
Now and again, I get stories from folks who've used RegRipper or the accompanying tools (rip, ripXP) to meet their needs. When that hap...
10 comments:
Saturday, December 19, 2009

The Trojan Defense

›
The malware did it...not me. How often do we see or hear of this? I don't see this specific question very often during exams...probably...
8 comments:

DF and Disclosure

›
The subtitle of this post should be something like, "The disclosure discussion comes to digital forensics" or "Yes, Virginia....
6 comments:
Thursday, December 17, 2009

When a tool is just a tool, pt II

›
Okay, this is part II for this post , because I posted an awesome rant to a thread in one of the forums, and I wanted to include that here, ...
3 comments:

When a tool is just a tool, pt I

›
A tool is just a tool...that's it. A tool by any other name would smell so sweet...no, wait...what? Who let Willy Shakes in here? ;-)...
Tuesday, December 15, 2009

Incident Prep, part deux

›
I've mentioned incident preparation before, and recently blogged on best practices , which was sort of a result of one of the comments ...
Monday, December 14, 2009

Link-idy link-idy

›
Tools Claus (no, I'm not saying that Claus is a tool...) has posted a nice summary of some of the free tools posts from WindowsIR and...
2 comments:
Friday, December 11, 2009

Some New Stuff

›
F-Response In case you hadn't noticed, Matt posted recently that F-Response works on Google Chrome OS ! Very cool! That's another ...
Monday, December 07, 2009

Plugin Browser - New RegRipper Tool

›
One of the things I've noticed since I first released the tools with RegRipper was that I thought I had a great idea by providing funct...
5 comments:
Friday, December 04, 2009

Best Practices: What is 'best'?

›
I know what you're thinking..."What?!?" As a consultant, many times I will be asked, "what are 'best practices'?...
1 comment:
Wednesday, December 02, 2009

Linkaliciousness

›
Timeline Stuff Don has put together something very interesting with respect to timeline creation called System Combo Timeline ; it looks lik...
Sunday, November 29, 2009

Incident Preparation

›
In the course of my work, I will often encounter a customer's computer security incident response plan, or CSIRP ... often , not always....
2 comments:
Wednesday, November 25, 2009

More Timeline Creation Techniques

›
Some of you may have seen (or be using) the timeline tools I released within the Win4n6 Yahoo group and included in my most recent Hakin9 ...
2 comments:
Sunday, November 22, 2009

Even More Linky Goodness...

›
Tools I received an email recently that let me know that the latest version of RevealerToolkit is available, a project from a Barcelona sec...
2 comments:
Wednesday, November 18, 2009

Working with Volume Shadow Copies

›
To begin with, let me say right up front that most of the information in this post, particularly the latter half, is not something that I d...
17 comments: