Pages

▼
Sunday, February 24, 2019

LNK Files

›
Update, 28 Feb : Just a quick note...this post is not about tools.  I do not mention any tools in the post, and the content isn't about...
Saturday, February 23, 2019

Tribe of Hacker Responses

›
When I shared my review of Marcus and Jennifer's Tribe of Hackers , I suggested to the reader that there was value in responding the que...
Friday, February 22, 2019

Aperture

›
If you follow me on Twitter or LinkedIn, you will very likely have seen me mention "aperture" more than a few times.  My use of th...
Thursday, February 07, 2019

Review: Tribe of Hackers

›
I'm not a hacker.  Yes, I'm intensely curious about technology, and in particular, computing.  However, I don't consider myself ...
Monday, February 04, 2019

Data Points And Analysis

›
In DFIR and "threat intel" analysis, very often individual data points are dismissed out of hand, as they are thought to be easily...
3 comments:
Wednesday, January 30, 2019

RegRipper

›
I recently tweeted that, as far as I'm aware, Nuix's Workstation/Investigator product is the only commercial product that incorpora...
6 comments:
Tuesday, January 15, 2019

Just For Fun...

›
OS/2Warp running in VirtualBox When I started graduate school in June 1994, I showed up having used Win3.1 and AOL for dial-up.  While i...
2 comments:
Wednesday, January 09, 2019

A Tale of Two Analyses

›
I recently shared my findings from an analysis challenge that Ali posted , and after publishing my post, found out that Adam had also share...
1 comment:
Monday, January 07, 2019

Mystery Hacked System

›
Ali was gracious enough to make several of the challenges that he put together for his students available online , as well as for allowing m...
4 comments:
Tuesday, January 01, 2019

LNK Toolmarks, Revisted

›
There was a  recent blog post and Twitter thread regarding the parsing and use of weaponized LNK file metadata. Based on some of what was s...