原站：http://windowsir.blogspot.com/

标签：windows response incident

“Windows Incident Response”的内容更新

累计：478 篇（自 2008-01-10 起）

更新：约2篇/周，最后更新109 天前

Windows Incident Response

Stuff

speakingi've got a couple of speaking engagements coming up that i thought i'd share...7-9 nov - pfic 2011 - i'll be giving two presentations, one on the benefits of using a forensic scanner, and the other, an introduction to windows forensics. i attended the conference last year, and had a great time, and i'm looking forward to meeting up with folks ag... (109 天前)

http://inezha.com/w/yavc03wd

Windows Incident Response

NoVA Forensics Meetup

reminder - our next nova forensics meetup is wed, 2 nov 2011...same bat-time, same bat-place.drop me an email or comment here if you're interested in meeting for a warm up at or just before 6pm.... (111 天前)

http://inezha.com/w/0ssqz3w9

Windows Incident Response

Tools and Links

not long ago, i started a foss page for my blog, so i didn't have to keep going back and searching for various tools...if i find something valuable, i'll simply post it to this page and i won't have to keep looking for it. you'll notice that i really don't have much in the way of descriptions posted yet, but that will come, and hopefully others will fin... (113 天前)

http://inezha.com/w/e1kbn3wu

Windows Incident Response

Stuff in the Media

now and again, i run across some interesting articles available through various media sources. back in the days when i was doing vulnerability assessments ('98-ish), we used to listen to what our contact said when we went onsite, and try to guess which magazines and journals he had open in his office...usually, we'd hear our contact using keywords from ... (120 天前)

http://inezha.com/w/rdvh83wt

Windows Incident Response

Links, Updates, and WhatNot

malwareevild3ad has an excellent writeup of the federal (aka, r2d2) trojan via memory analysis using volatility. the blog post gives a detailed walk-through of the analysis conducted, as well as the findings. overall, my three big take-aways:1. an excellent example of how to use volatility to conduct memory analysis.2. an excellent example of case no... (120 天前)

http://inezha.com/w/nhsdtnwc

Windows Incident Response

Links

carbon black i recently gave a presentation at etcss, during which we discussed the need for incident preparedness in order to improve the effect of incident response efforts. in that presentation, i mentioned and described carbon black (cb), as well as how it can be used in other ways besides ir.while i was traveling to the venue, cb enterprise was rel... (126 天前)

http://inezha.com/w/9bk1hnwl

Windows Incident Response

NoVA Forensic Meetup

last night's meetup went very well! i'd like to thank brian rydstrom for providing a very good presentation on mobile forensics...i don't do any forensics of mobile devices, so i found the information very valuable.i'd also like to thank everyone who showed up last night. attendance was very good...we had about 28 people show up, and a lot of interacti... (134 天前)

http://inezha.com/w/bqvs0nwp

订阅者 ( 1 )

相关订阅源