Port 22

~ 18 Apr 2017 ~

Taking Control of Your Application Security

~ 17 Apr 2017 ~

Writing a libemu/Unicorn Compatability Layer

~ 8 Mar 2017 ~

Introduction to Reverse Engineering Cocoa Applications

~ 8 Feb 2017 ~

SANS Pen Test Cheat Sheet: Metasploit

~ 4 Jan 2017 ~

Critiques of the DHS/FBI's GRIZZLY STEPPE Report

~ 2 Jan 2017 ~

DHS and FBI Joint Analysis Report Confirms FireEyes Assessment that Russian Government Likely Sponsors APT28 and APT29

~ 26 May 2016 ~

SANS Pen Test Cheat Sheet: PowerShell

~ 3 May 2016 ~

Deobfuscating Python Bytecode

~ 5 Apr 2016 ~

SANS Pen Test Cheat Sheet: Scapy

~ 11 Mar 2016 ~

A Growing Number of Android Malware Families Believed to Have a Common Origin: A Study Based on Binary Code

~ 18 Jan 2016 ~

ICS Cross-Industry Learning: Cyber-Attacks on Electric Transmission and Distribution (Part Two)

~ 8 Jan 2016 ~

ICS Cross-Industry Learning: Cyber-Attacks on Electric Transmission and Distribution (Part One)

~ 26 Oct 2015 ~

iBackDoor: High-risk Code Sneaks into the App Store

~ 19 Aug 2015 ~

Device Profiling With Windows Prefetch

~ 8 Aug 2015 ~

Windows Management Instrumentation (WMI) Offense, Defense, and Forensics

~ 19 Jul 2015 ~

Second Adobe Flash Zero-Day CVE-2015-5122 from HackingTeam Exploited in Strategic Web Compromise Targeting Japanese Victims

~ 28 Jun 2015 ~

Detecting Shellcode Hidden in Malicious Files

~ 17 Jun 2015 ~

June 2 6/12/2015 Consulting Thought Leadership "Proactively Engaged Questions Executives Should Ask Their Security Teams " "-Many breaches occur as a result of executive decisions made w/out full knowledge of the people/processes needed to prevent them; -Offers specific questions that execs should ask to understand and prevent a breach" Jim Aldridge Kyrk Content Finalized Global June 2 6/12/2015 Consulting Thought Leadership "Proactively Engaged Questions Executives Should Ask Their Security Teams " "-Many breaches occur as a result of executive decisions made w/out full knowledge of the people/processes needed to prevent them; -Offers specific questions that execs should ask to understand and prevent a breach" Jim Aldridge Kyrk Content Finalized GlobCaching Out: The Value of Shimcache for Investigators

~ 3 Jun 2015 ~

ESE Databases are Dirty!

~ 25 Feb 2015 ~

Parsing Sysmon Events for IR Indicators

~ 7 Oct 2014 ~

Announcing the GIAC Network Forensic Analyst Certification - GNFA

~ 11 Sep 2014 ~

FLARE IDA Pro Script Series: MSDN Annotations IDA Pro for Malware Analysis

~ 1 Aug 2014 ~

FLARE IDA Pro Script Series: Automatic Recovery of Constructed Strings in Malware

~ 20 Feb 2014 ~

Operation GreedyWonk: Multiple Economic and Foreign Policy Sites Compromised, Serving Up Flash Zero-Day Exploit

~ 8 Jul 2013 ~

Getting Started with Linux Memory Forensics

~ 5 Jun 2013 ~

Control Panel Forensics: Evidence of Time Manipulation and More

~ 30 Apr 2013 ~

Q&A Follow-up - Tools of Engagement: The Mechanics of Threat Intelligence

~ 23 Apr 2013 ~

Encrypted Disk Detector Version 2

~ 18 Apr 2013 ~

New Targeted Attack On Taiwanese Government & Tibetan Activists Open Up a Can Of Worms - GrayPigeon, Hangame & Shiqiang gang

~ 9 Apr 2013 ~

Cloud Forensics with F-Response

~ 29 Oct 2012 ~

Help Improve EDD - Encrypted Disk Detector!

~ 16 Oct 2012 ~

Incident Response with NTFS INDX Buffers Part 4: The Internal Structures of an INDX Attribute

~ 10 Oct 2012 ~

Incident Response with NTFS INDX Buffers - Part 3: A Step by Step Guide to Parse INDX

~ 26 Sep 2012 ~

Incident Response with NTFS INDX Buffers Part 2: The Internal Structures of a File Name Attribute

~ 18 Sep 2012 ~

Incident Response with NTFS INDX Buffers Part 1: Extracting an INDX Attribute

~ 26 Jul 2012 ~

Four Focus Areas of Malware Analysis

~ 3 Jul 2012 ~

An Overview Of Protocol Reverse-Engineering

~ 29 May 2012 ~

How to Extract Flash Objects From Malicious MS Office Documents

~ 25 Jan 2012 ~

Digital Forensic SIFTing: Colorized Super Timeline Template for Log2timeline Output Files

~ 20 Jan 2012 ~

Digital Forensic SIFTing - Targeted Timeline Creation and Analysis using log2timeline

~ 21 Dec 2011 ~

Digital Forensic SIFTing: String Searching and File Carving using srch_strings_wrap

~ 7 Dec 2011 ~

Digital Forensic SIFTing: SUPER Timeline Creation using log2timeline

~ 25 Oct 2011 ~

Windows Firewall Script To Block IP Addresses And Country Network Ranges

~ 10 Aug 2011 ~

Seven Security (Mis)Configurations in Java web.xml Files

~ 4 Aug 2011 ~

Consortium of Digital Forensic Specialists Is Launched; Will Focus on Standards and Advocacy

~ 8 Jul 2011 ~

Downloads

~ 5 Jul 2011 ~

Computer Forensic Artifacts: Windows 7 Shellbags

~ 27 Jun 2011 ~

Digital Forensics: Dropbox

~ 3 Jun 2011 ~

What the fxsst?

~ 4 May 2011 ~

How to Extract Flash Objects from Malicious PDF Files

~ 26 Apr 2011 ~

Data reduction redux and map-reduce

~ 10 Feb 2011 ~

Computer Forensics How-To: Microsoft Log Parser

~ 2 Feb 2011 ~

How To: Forensically Sound Mac Acquisition In Target Mode

~ 1 Feb 2011 ~

Extracting Event Logs or Other Memory Mapped Files from Memory Dumps

~ 8 Nov 2010 ~

Digital Forensics How-To: Memory Analysis with Mandiant Memoryze

~ 2 Nov 2010 ~

Digital Forensics: Detecting time stamp manipulation

~ 20 Oct 2010 ~

Digital Forensics: Persistence Registry keys

~ 4 Oct 2010 ~

How To - Digital Forensic Imaging In VMware ESXi

~ 29 Sep 2010 ~

6 Hex Editors for Malware Analysis

~ 28 Sep 2010 ~

How To - Digital Forensics Copying A VMware VMDK

~ 1 Sep 2010 ~

DLL Search Order Hijacking Revisited

~ 20 Aug 2010 ~

Getting Started in Digital Forensics: Do You Have What It Takes?

~ 19 Aug 2010 ~

Digital Forensics Reporting: CaseNotes Walkthrough/Review

~ 16 Aug 2010 ~

Reversing Malware Command and Control: From Sockets to COM

~ 19 Jul 2010 ~

exFAT File System Time Zone Concerns