Andrea Fortuna
AboutSearch
Tools
DFIR Toolkit OSINT Toolkit
  • Apr 30, 2018

    Dumb bug on NTFS.sys triggers a BSOD when Windows attempts to mount a malformed disk image

    The security researcher Marius Tivadar has discovered a vulnerability on Windows NTFS filesystem and published a proof-of-concept code on GitHub that could be used to cause Blue Screen of Death within seconds on most Windows computers. … read more »
  • Apr 27, 2018

    Frank Zappa: live at the Palace of Sports of Barcelona in 1988

    “A mind is like a parachute. It doesn’t work if it is not open.” (F. Zappa) … read more »
  • Apr 25, 2018

    AWS Tips: a security checklist for S3 buckets

    Some days ago i’ve written about AWS S3 security concerns, with a post about some tools to find unsecured buckets. … read more »
  • Apr 23, 2018

    WSLtty: a better terminal emulator for Windows Subsystem for Linux

    The Windows Subsystem for Linux (WSL) is a great feature introduced in Windows 10. … read more »
  • Apr 20, 2018

    Paul Galbraith, an unconventional technique for an unconventional guitar

    Paul Galbraith is an outstanding artist, especially in his interpretation ofJ.S. Bachh. … read more »
  • Apr 18, 2018

    Some useful scripts for extraction and correlation of forensic artifacts in Windows Registry

    Some interesting scripts, probably outdated but still useful. … read more »
  • Apr 16, 2018

    Ten command line tools for manipulate JSON arrays

    It’s not a mystery: raw JSON it’s not really readable! … read more »
  • Apr 13, 2018

    Why do cats do that?

    A funny and interesting TED-ED Talk! … read more »
  • Apr 11, 2018

    How to mount an EWF image file (E01) on Linux

    Often, during a forensic analysis, you may need to explore an EWF image (usually a file with .E0X extension) in order to extract some artifacts. … read more »
  • Apr 9, 2018

    Digital Forensic: the Chain of Custody

    My own suggestions about keeping a Digital Chain of Custody … read more »
  • Apr 6, 2018

    Guitar tips: How to practice productively

    Effective practice isn’t just a physical exercise: most of the effectiveness it’s in the mind too. … read more »
  • Apr 4, 2018

    How to find unsecured S3 buckets: some useful tools

    Services like Amazon’s S3 have made it easier and cheaper than ever to store large quantities of data in the cloud. Used properly, S3 buckets are a useful tool, however a lot of companies fail to implement basic security resulting… read more »
  • Mar 30, 2018

    Guitar tips: slur exercises on groups of two notes

    Left hand slurs are an essential part of a good technical practice. … read more »
  • Mar 28, 2018

    What is the China Chopper Webshell, and how to find it on a compromised system?

    Some days ago, during a chat with a friend who works in a small software development company, the webshells topic has come up. … read more »
  • Mar 26, 2018

    Retrieving NTLM Hashes without touching LSASS: the “Internal Monologue" Attack

    A new technique, called “Internal Monologue Attack”, allows and attack similar to Mimikatz without dumping memory area of LSASS process, avoiding antivirus and Windows Credential Guard. … read more »
  • Mar 23, 2018

    Abel Carlevaro: his technique, his guitar, his Microstudies

    Sometimes, Youtube suggest me guitar related videos, and in most cases are very interesting contents. … read more »
  • Mar 21, 2018

    Facebook and Cambridge Analytica: data breach or business model?

    Some thought about Cambridge Analytica and Facebook privacy settings. … read more »
  • Mar 19, 2018

    Do you think your passwords are in a safe place using a password manager?

    The problem is always the same: every data that is stored into volatile memory can be extracted with the correct tools/techniques. … read more »
  • Mar 16, 2018

    The Pomodoro technique for musicians

    Simple, but effective! … read more »
  • Mar 14, 2018

    What is SIFT Workstation and how install it on my Linux (or Windows) system?

    In my point of view, SIFT is the definitive forensic toolkit! … read more »
« Previous page Next page »

Andrea Fortuna

  • Andrea Fortuna
  • andrea@andreafortuna.org
  • andreafortuna
  • andreafortunaig
  • andrea-fortuna

Cybersecurity expert, software developer, experienced digital forensic analyst, musician