-
Aug 1, 2018
The Netflix Security Intelligence and Response Team (SIRT) has released (under Apache 2.0 license) a triage tool to help digital forensics and incident response teams quickly identify compromised hosts on which to focus their response.
… read more »
-
Jul 30, 2018
Recently i’ve published this post focused on hunting malware using volatility and Yara rules.
… read more »
-
Jul 27, 2018
A 2 hour video biography of the great guitarist Julian Bream.
… read more »
-
Jul 25, 2018
Spoiler: shame on DumpIT!
… read more »
-
Jul 23, 2018
The ability to quickly and reliably detect lateral movement in the network is one of the most important skills in information security today: the lateral movement attack phase represents the biggest difference between a targeted and strategic attacks and a simplistic… read more »
-
Jul 20, 2018
Joaquín Rodrigo’s Concierto de Aranjuez is one of the most popular concertos of all time, one of the most original masterpieces of the 20th century.
… read more »
-
Jul 18, 2018
Having a solid grasp of tcpdump is mandatory for anyone desiring a thorough understanding of TCP/IP.
… read more »
-
Jul 16, 2018
Previously i’ve talked a lot about Volatility, and i’ve published also some articles about YARA.
… read more »
-
Jul 13, 2018
“Shape of My Heart” is a song by Sting from his album “Ten Summoner’s Tales”, released in 1993.
… read more »
-
Jul 11, 2018
Application whitelisting is the practice of specifying an index of approved software applications that are permitted to be present and active on a computer system.
… read more »
-
Jul 9, 2018
Which is the best command line text editor? Seriously, i don’t know!
… read more »
-
Jul 6, 2018
Recently i have found on YouTube some wonderful recordings of Heitor Villa-Lobos playing his own music.
… read more »
-
Jul 4, 2018
Researchers at Kromtech Security Center discovers seventeen malicious Docker containers with embedded cryptominer applications that permitted to cybercriminals to earn $90,000 in 30 days.
… read more »
-
Jul 2, 2018
bash (Bourne Again shell) is the standard GNUshell, a powerful tool for the advanced and professional user.
… read more »
-
Jun 29, 2018
This little piece has an interesting story.
… read more »
-
Jun 27, 2018
Some days ago, with a colleague, i’ve talked about the real usefulness of USB hardware locks on critical clients/servers.
… read more »
-
Jun 25, 2018
When you develop an application, often you could need to store some configurations. This data can contain a lot of sensitive informations, and this is a critical point if your sourcecode is hosted on a GitHub repository.
… read more »
-
Jun 22, 2018
It’s not a mistery: a musician needs to spend time with the instrument.
… read more »
-
Jun 20, 2018
Gargoyle is a memory analysis evasion technique that uses return-oriented programming (RoP) for hiding all of a program’s executable code in non-executable memory when it is inactive, and temporarily mark it executable to do some work at a pre-defined interval… read more »
-
Jun 18, 2018
Impacket is a collection of Python classes, developed by Core Security, for working with network protocols, which provides a low-level programmatic access to the packets and, for some protocols such us SMB1-3 and MSRPC, the protocol implementation itself.
… read more »