Just some thoughts about memory, Forensics and Volatility! Hits: 320
The little handbook of Windows Memory Analysis
Posted on
Category: Dfir
SNDBOX: using Artificial Intelligence for malware analysis
Posted on
Cybersecurity researchers Ran Dubin and Ariel Koren have developed a new platform form malware analysis, based on an AI engine. Hits: 87
Android Forensics: imaging android filesystem using ADB and DD
Posted on
Let’s starting a series of article related to digital forensic focused on mobile devices. In this first post i’d like to share some thoughts about image acquisition on android devices. Hits: 1779
AutoTimeliner: automatically extract forensic timeline from memory dumps
Posted on
Often, during an incident response, may be necessary to analyze a lot of evidences, like disk and memory dumps. Hits: 433
Process Injection and Persistence using Application Shimming
Posted on
Microsoft provides Shims to developers mainly for backward compatibility, but malware can take advantage of shims to target an executable for both persistence and injection. Hits: 107