Port 22

~ 26 Sep 2012 ~

Incident Response with NTFS INDX Buffers Part 2: The Internal Structures of a File Name Attribute

~ 18 Sep 2012 ~

Incident Response with NTFS INDX Buffers Part 1: Extracting an INDX Attribute

Incident Response with NTFS INDX Buffers Part 1: Extracting an INDX Attribute

~ 16 Aug 2012 ~

M-Unition Podcast: Mandiants Redline Tool Makes Incident Response Easy for Experts and Beginners

M-Unition Podcast: Mandiants Redline Tool Makes Incident Response Easy for Experts and Beginners

~ 26 Jul 2012 ~

Four Focus Areas of Malware Analysis

~ 19 Jul 2012 ~

New Open Source Tool: Audit Parser

New Open Source Tool: Audit Parser

~ 3 Jul 2012 ~

An Overview Of Protocol Reverse-Engineering

~ 28 Jun 2012 ~

Unibody Memory Analysis -- Introducing Memoryze for the Mac 1.0

Unibody Memory Analysis -- Introducing Memoryze for the Mac 1.0

~ 29 May 2012 ~

How to Extract Flash Objects From Malicious MS Office Documents

~ 14 May 2012 ~

M-Trends #1: Malware Only Tells Half the Story

M-Trends #1: Malware Only Tells Half the Story

~ 24 Apr 2012 ~

Exploring Symbol Type Information with PdbXtract

~ 19 Apr 2012 ~

Investigating Indicators of Compromise In Your Environment With Latest Version of Redline

Investigating Indicators of Compromise In Your Environment With Latest Version of Redline

~ 2 Apr 2012 ~

Executive Briefing in New York with Former Secretary of Homeland Security Michael Chertoff

Executive Briefing in New York with Former Secretary of Homeland Security Michael Chertoff

~ 22 Mar 2012 ~

The Latest Version of Redline Finds Indicators of Compromise and More

The Latest Version of Redline Finds Indicators of Compromise and More

~ 25 Jan 2012 ~

Digital Forensic SIFTing: Colorized Super Timeline Template for Log2timeline Output Files

~ 20 Jan 2012 ~

Digital Forensic SIFTing - Targeted Timeline Creation and Analysis using log2timeline

~ 21 Dec 2011 ~

Digital Forensic SIFTing: String Searching and File Carving using srch_strings_wrap

~ 7 Dec 2011 ~

Digital Forensic SIFTing: SUPER Timeline Creation using log2timeline

~ 25 Oct 2011 ~

Windows Firewall Script To Block IP Addresses And Country Network Ranges

~ 24 Oct 2011 ~

Research Tool Release: ApateDNS

Research Tool Release: ApateDNS

~ 10 Aug 2011 ~

Seven Security (Mis)Configurations in Java web.xml Files

~ 4 Aug 2011 ~

Consortium of Digital Forensic Specialists Is Launched; Will Focus on Standards and Advocacy

~ 8 Jul 2011 ~

Downloads

~ 5 Jul 2011 ~

Computer Forensic Artifacts: Windows 7 Shellbags

~ 27 Jun 2011 ~

Digital Forensics: Dropbox

~ 3 Jun 2011 ~

What the fxsst?

~ 4 May 2011 ~

How to Extract Flash Objects from Malicious PDF Files

~ 26 Apr 2011 ~

Data reduction redux and map-reduce

~ 10 Feb 2011 ~

Computer Forensics How-To: Microsoft Log Parser

~ 8 Feb 2011 ~

Highlighter v1.1.2 Released

Highlighter v1.1.2 Released

~ 3 Feb 2011 ~

zynamics VxClass and memory analysis

zynamics VxClass and memory analysis

~ 2 Feb 2011 ~

How To: Forensically Sound Mac Acquisition In Target Mode

~ 1 Feb 2011 ~

Extracting Event Logs or Other Memory Mapped Files from Memory Dumps

~ 8 Nov 2010 ~

Digital Forensics How-To: Memory Analysis with Mandiant Memoryze

~ 2 Nov 2010 ~

Digital Forensics: Detecting time stamp manipulation

~ 21 Oct 2010 ~

Feodo - A new botnet on the rise

Feodo - A new botnet on the rise

~ 20 Oct 2010 ~

Digital Forensics: Persistence Registry keys

~ 4 Oct 2010 ~

How To - Digital Forensic Imaging In VMware ESXi

~ 29 Sep 2010 ~

6 Hex Editors for Malware Analysis

~ 28 Sep 2010 ~

How To - Digital Forensics Copying A VMware VMDK

~ 21 Sep 2010 ~

Memory forensics on Windows 7 (x86 and x64) and Windows 2008 x64

Memory forensics on Windows 7 (x86 and x64) and Windows 2008 x64

~ 1 Sep 2010 ~

DLL Search Order Hijacking Revisited

~ 20 Aug 2010 ~

Getting Started in Digital Forensics: Do You Have What It Takes?

~ 19 Aug 2010 ~

Digital Forensics Reporting: CaseNotes Walkthrough/Review

~ 16 Aug 2010 ~

Reversing Malware Command and Control: From Sockets to COM

~ 19 Jul 2010 ~

exFAT File System Time Zone Concerns

~ 15 Jul 2010 ~

Malware Persistence without the Windows Registry

~ 28 Jun 2010 ~

Autoruns and Dead Computer Forensics

~ 7 Oct 2009 ~

Why Digital Forensic Certifications Are Needed

~ 28 Aug 2009 ~

Flash Cookie Forensics

~ 13 Aug 2009 ~

The changing battlefield in Memory

The changing battlefield in Memory

~ 12 Aug 2009 ~

Acquiring Data from Windows Mobile Devices