SecuraBit Episode 58: Forensic Goodness with Harlan Carvey Hosts: Anthony Gartner – @anthonygartner http://anthonygartner.com Christopher Mills – @thechrisam Chris Gerling – @chrisgerling Aricon Andrew Borel – @andrew_secbit Guests: Harlan Carvey http://windowsir.blogspot.com/ Tools: http://tech.groups.yahoo.com/group/win4n6/ General topics: Timeline creation Regripper Forensic trends SIFT Lance Mueller http://www.forensickb.com/ Are you interested in taking an upcoming SANS course? Dr. Eric [...]
Posts Tagged ‘forensics’
Rootkit Analysis: Hiding SSDT hooks
March 31st, 2010
3 Comments
In attempt to bring our readers/listeners more technical content, the SecuraBit team has brought on a guest blogger to cover some of the current issues facing malware analysts/reverse engineers. Nick Jogie’s first post delves into rootkit analysis and explains in great detail how to detect such when AV and perimeter security devices just aren’t enough. [...]
Open Source Android Forensics
March 2nd, 2010
No Comments
With more and more people using mobile devices, there’s a growing need to examine these devices forensically. While there are commercial tools available, it only makes sense that there should be open source tools to use for it as well. To that end Andrew Hoog of viaForensics has announced the first release of their Android [...]
SecuraBit Episode 50: Interview with Rob Lee!
February 15th, 2010
No Comments
SecuraBit Episode 50: Interview with Rob Lee! What is SANS vLive? Forensics DOD Cyber Crime How the forensics classes are structured. 508 course and how it’s changed. Divided up into essentials and then follow on courses. 6 total courses for all of the info. APT – Advanced Persistant Threat Q & A from the IRC [...]
SecuraBit live tonight with Rob Lee!
February 10th, 2010
No Comments
Join us tonight as we interview Rob Lee where he’ll be discussing his upcoming SANS vLive! course as well as other happenings in the security world….APT. We should be live around 8pm EST tonight, join us on IRC or listen in live at this link! If you haven’t taken the Security 508 course yet we have [...]
Rob Lee will be on the 2/10 show!
January 27th, 2010
No Comments
If you haven’t taken the Security 508 course yet we have an excellent opportunity for you! He will be teaching the SEC508 (Forensics) course via the SANS vLive! platform beginning 3/23/2010. Classes will occur every Tuesday and Thursday until 4/29/2010 from 7-10PM EDT. I have personally taken the 508 course and recommend anyone who is [...]
SecuraBit Episode 48: Shmoocon (The Big Cheese) and PhoneFactor!
January 17th, 2010
No Comments
Hosts: Anthony Gartner – @anthonygartner Christopher Mills – @thechrisam Jason Mueller – @securabit_jay Chris Gerling – @chrisgerling Guests: Bruce Potter – Shmoocon – @gdead Steve Dispensa – CTO and Co-founder of PhoneFactor - http://www.phonefactor.com/about/management-team/steve-dispensa/ @dispensa Marsh Ray – PhoneFactor – @marshray Recent goings on: If you are going to DC3 CyberCrime Conference contact Jason Mueller (@securabit_jay) [...]
SANS CDI 2009 – Reverse Engineering Malware
December 9th, 2009
4 Comments
So this coming Friday, December 11 – 14, I will have the privilege of attending SANS CDI 2009. It’s the largest SANS event that takes place every year in the heart of our nation’s capital. Besides the horrendous traffic and the bitter cold I’m eager to learn from one of the best in our field, Lenny Zeltser. [...]
Starting a forensic investigation – what to know?
October 1st, 2009
3 Comments
When you are handed a hard drive or a laptop and management tells you to cast your spell of forensics final report on it, what are some things that you need to know before you begin? If it’s for a legal case, are there questions you should ask before you get your hands dirty? Perhaps [...]
SecuraBit EP 23 The Echo Show!!! with Guest Marcus Carey
February 27th, 2009
No Comments
We had a brief discussion about hackerspaces. Chris Gerling is looking into starting a hackerspace in the Richmond, VA area.
Next we cover the details about SUMO LINUX 2.0 with our guest Marcus Carey.
SUMO LINUX 2.0
-
