ThinkTank Forensics

You have just come across a site compromise. You believe that the client was impacted due to a malicious java .class file on a rogue website that they visited. The class file is compiled, what can you do? Luckily, java class files are simple to reverse engineer. In fact, using just the native JDK, the process [...]

Excellent article discussing the increased demand for real technical skills.  It has an excellent writeup on GIAC Certifications including the GIAC Certified Forensic Analyst (GCFA). Why are certifications in high demand?  From the article: Increased Usage and Dependency on Digital Devices: We constantly use computer and other digital mobile devices for making calls, texting messages, surfing [...]

Rob Lee of MANDIANT and the SANS Institute was interviewed by Tom Field. Rob Lee, a director with Mandiant and curriculum lead for digital forensic training at SANS Institute, discusses: the growing need for digital forensics skills; today’s top challenges and how organizations are tackling them; career prospects for individuals in digital forensics. The Podcast can be found here: PODCAST [...]

One of the projects that I’ve been working on, has required me to become intimately familiar with index.dat files.  These files (index.dat) are usually associated with Internet Explorer’s browser history.  If you’ve ever worked with index.dat files before, you’ve probably encountered the mysterious “LEAK” record.  After some analysis, I think I’ve finally figured out what [...]