Pages

▼
Thursday, April 28, 2011

NoVA Forensic Meet-Up

›
I've scheduled a room at the Reston Public Library on Wed, 4 May 2011, for the first NoVA Forensic Meet-Up.  We're scheduled for 7p...
2 comments:
Tuesday, April 26, 2011

Proactive IR

›
There are a couple of things that are true about security, in general, and IR specifically.  One is that security seems to be difficult for ...
4 comments:
Friday, April 22, 2011

Extending RegRipper (aka, "Forensic Scanner")

›
I'll be presenting on "Extending RegRipper " at Brian Carrier 's Open Source Digital Forensics Conference on 14 June, alo...
17 comments:

Updates

›
 Book Update  I've received the counter-signed contract from Syngress for Windows Forensic Analysis 3/e , and I'm finishing up a c...
1 comment:
Wednesday, April 13, 2011

Links

›
Book Review Ken Pryor posted a review of Windows Registry Forensics over on his blog...I greatly appreciate the effort folks put into the...
1 comment:
Tuesday, April 12, 2011

Using RegRipper

›
I've received a couple of questions about RegRipper and it's use, and I thought that I'd take the opportunity to provide some mo...
8 comments:
Monday, April 11, 2011

Links and Stuff

›
Digital Forensic Search Corey Harrell's done some pretty interesting things lately...most recently, he set up a search mechanism that ...
Thursday, April 07, 2011

Links

›
Digital Forensics Framework The guys over at DFF have an open-source framework used as both a digital investigation and development platfo...
1 comment:
Tuesday, April 05, 2011

Readin' and Writin'

›
Richard Bejtlich recently wrote an interesting blog post on reading , and followed that up with some answers to questions posted as comment...
1 comment:

More on Breaches...

›
Sorry...no pun intended.  No...wait.  I totally meant it. I was reading through some news items recently, and came across an article on Ya...
Monday, April 04, 2011

Breaches, Links, and other stuff...

›
Breaches As many of you know, I am (quite thankfully) no longer involved in Visa PCI breach investigations.  However, something I saw in th...
Thursday, March 31, 2011

More Links...

›
Carbon Black Every now and again, I talk about incident preparation.  For the most part, as a responder, this is something of a fantasy, be...