Pages

▼
Monday, January 20, 2014

Book Review: Cloud Storage Forensics

›
I had an opportunity to review Cloud Storage Forensics recently, and I wanted to provide my thoughts on the contents of the book.  I genera...
2 comments:
Sunday, January 12, 2014

Malware RE - IR Disconnect

›
Not long ago, I'd conducted some analysis that I had found to be...well, pretty fascinating...and shared some of the various aspects of...
4 comments:
Saturday, December 28, 2013

Quick Post

›
RegRipper At the end of this past summer and into the fall, I was working on the print matter for Windows Forensic Analysis 4/e , and I...
Wednesday, December 18, 2013

Shellbags

›
Dan recently posted what has to be one of the most thorough/comprehensive blog articles regarding the Windows shellbags artifacts.  His po...
1 comment:
Monday, December 16, 2013

Updates

›
Things tend to move fast in the DFIR world sometimes, and since my last post , there have been some updates to some of the things that were ...
2 comments:
Wednesday, December 04, 2013

Links and News

›
There have been some exciting developments recently on the Windows digital forensic analysis front, and I thought it would be a good idea ...
Wednesday, November 20, 2013

Sniper Forensics, Memory Analysis, and Malware Detection

›
I conducted some analysis recently where I used timeline analysis, Volatility, and the Sniper Forensics concepts shared by Chris Pogue to d...
4 comments:
Wednesday, November 13, 2013

Tools, Malware, and more conference follow-up

›
Tools Arsenal Recon - Image Mounter utility: the web site says that the tool is " currently geared towards digital forensics and inci...
6 comments:
Thursday, November 07, 2013

Conferences

›
I recently had the opportunity (and honor) of attending the Open Memory Forensics Workshop (OMFW) and the Open Source Digital Forensics Co...
4 comments:
Monday, October 28, 2013

Links

›
This is not the persistence mechanism you were looking for... First off, thanks to David Cowen for taking the time to address a question re...
5 comments:
Wednesday, October 09, 2013

Shell Item Artifacts, Reloaded

›
I spoke on David Cowen and crew's Forensic Lunch a bit ago, on the topic of shell item artifacts .  I put together some slides at th...
Tuesday, September 24, 2013

Links - Malware Edition

›
Malware Bromium Labs posted some pretty interesting information regarding another Zeus variant; the information in this post is very use...
1 comment: