[memory] Memoryze と Audit Viewer

sec

Memoryze http://www.mandiant.com/products/free_software/memoryze/Audit Viewer http://www.mandiant.com/products/free_software/mandiant_audit_viewer/ >Process.bat -input memory_dump.raw -handles true -sections true -ports true -injected true…

2012-02-03

[memory] Volatility

sec

A)メモリのダンプMoonSols DumpIt MoonSols DumpIt goes mainstream ! | MoonSols B)メモリの解析 Volatility-2.0 https://www.volatilesystems.com/default/volatility Usage: Volatility - A memory forensics analysis platform.Options: -h, --help list…

2012-02-01

[web] [DVWA] Damn Vulnerable Web Application

sec

やられウェブアプリケーション DVWA - Damn Vulnerable Web Application

2012-01-21

[malware] [forensics]

sec

Microsoft PowerPoint - Malware Detection Malware Detection.pdf - Google ドライブ malware detection checklist malware detection checklist.docx - Google Docs

2011-12-31

[memory] [forensic] [Volatility] Hunting malware with Volatility v2.0

sec

http://reconstructer.org/papers/Hunting%20malware%20with%20Volatility%20v2.0.pdf https://www.volatilesystems.com/default/volatility

2011-12-10

Forensic Analysis of VMware Hard Disks

sec

Forensic Analysis of VMware Hard Disks - Digital Forensics Forums | ForensicFocus.com

2011-12-08

[forensics] Digital Forensic SIFTing: SUPER Timeline Analysis and Creation using log2timeline-sift

sec

SANS Digital Forensics and Incident Response Blog | Digital Forensic SIFTing: SUPER Timeline Creation using log2timeline | SANS Institute

2011-12-03

[forensics] [tool] SIFT Workstation 2.12 Release and ChangeLog

sec

SANS Digital Forensics and Incident Response Blog | SIFT Workstation 2.12 Release and ChangeLog | SANS Institute

2011-11-27

[mac] [Lion] [Forensics] OS X Lion Artifacts

sec

OS X Lion Artifacts | Forensic Artifacts

2011-11-26

[HITCON2011] 問題一覧

sec

Redirecting

2011-11-25

[HITB] [CONF2011] 資料

sec

Index of /hitbsecconf2011kul/materials [http://conference.hitb.org/hitbsecconf2011kul/materials/:image]

2011-10-27

【製品テスト・レポート】Palo Alto Networks

sec

http://www.computerworld.jp/topics/593/%E3%83%8D%E3%83%83%E3%83%88%E3%83%AF%E3%83%BC%E3%82%AF%E6%A9%9F%E5%99%A8/200890/%E6%AC%A1%E4%B8%96%E4%BB%A3%E3%83%95%E3%82%A1%E3%82%A4%E3%82%A2%E3%82%A6%E3%82%A9%E3%83%BC%E3%83%AB%EF%BC%8FPalo%20Alto%…

2011-10-23

[malware] [analysis] Zero Wine Tryouts

sec

Zero Wine Tryouts | Official Website

2011-10-22

xor ブルートフォース xorsearch

sec

XORSearch & XORStrings | Didier Stevens

2011-10-22

[remnux] マルウェア解析用ubuntu

sec

http://zeltser.com/remnux/

2011-10-11

政府によるものとおぼしきバックドアを発見（「R2D2ケース」）

sec

エフセキュアブログ : 政府によるものとおぼしきバックドアを発見（「R2D2ケース」）

2011-10-11

Reverse Proxy Bypass

sec

http://www.contextis.com/research/blog/reverseproxybypass/

2011-09-28

[forensics] NTFS $I30 Index Attributes: Evidence of Deleted and Overwritten Files

sec

NTFS $I30 Index Attributes: Evidence of Deleted and Overwritten Files | Forensic Methods

2011-09-20

[gpu] [crack] [password] oclHashcat-plus

sec

windows7 64bitAMD Radeon HD 6450ハッシュ：NTLM検証NTLMハッシュ数：3000辞書単語数：3400万 C:\>oclHashcat-plus32.exe -m 1000 ntlm2.txt dic.txt Status.......: Exhausted Hash.Type....: NTLM Input.Mode...: File (dic.txt) Time.Running.: 12 secs …