Pages

▼
Thursday, September 28, 2017

Something on the fun/irreverent side

›
A while back, I read about some ransomware that, instead of leaving a ransom note, accessed the speech functionality of Windows systems to t...
1 comment:
Tuesday, September 26, 2017

Updates

›
ADS It's been some time since I've had an opportunity to talk about NTFS alternate data streams (ADS), but the folks at Red Canary ...
2 comments:
Tuesday, September 05, 2017

Stuff

›
QoTD The quote of the day comes from Corey Tomlinson, content manager at Nuix.  In a recent blog post, Corey included the statement: The ...
Saturday, September 02, 2017

Updates

›
Office Maldocs, SANS Macros HelpNetSecurity had a fascinating blog post recently on a change in tactics that they'd observed (actually...
Tuesday, August 22, 2017

Beyond Getting Started

›
I blogged about getting started in the industry back in April (as well as here  and here ), and after having recently addressed the questio...
14 comments:
Friday, August 18, 2017

Updates, New Stuff

›
Specificity The folks at Talos recently posted an interesting article, "O n Conveying Doubt ".  While some have said that this ar...
Wednesday, August 02, 2017

Document Metadata

›
Okay, yeah, so I've been blogging a lot over the past couple of months about extracting document metadata as part of gathering threat in...
Sunday, July 09, 2017

Tools

›
Today's post is a mish-mash of tools and techniques that I've seen or used recently... Hindsight is a great free, open source too...
1 comment:
Thursday, June 15, 2017

Analyzing Documents

›
I've noticed over time that a lot of the write-ups that get posted online regarding malware or downloaders delivered via email attachmen...
Wednesday, May 31, 2017

Use of LNK Files...Again

›
I've discussed LNK file before... here , and more recently, here .  Windows shortcut files are an artifact on Windows systems that have ...
2 comments:
Sunday, April 09, 2017

Getting Started

›
Not long ago, I gave some presentations at a local high school on cybersecurity, and one of the questions that was asked was, "how do I...
3 comments: