Sunday, May 1, 2016

Locky Ransomware Analysis - Analysing through Process Explorer

›
Picking up from where th e last post left off, we noticed that the "Locky.exe" process exited. However, we also noticed that it c...
3 comments:

Locky Ransomware Analysis - Understanding its execution, looking for artificats with Process Monitor

›
As we continue this journey looking at Locky, let's see what it looks like in actual production. Since my AV detected it in the previous...

Locky Ransomware Analysis - Will my AV help?

›
Considering there is so much about ransomware in the news and to some extent Locky, I thought I should take the opportunity to take a closer...

How I recovered my "lost" password - Burpsuite

›
Ahhhhhhhhhhhhh, sometimes the thought of having to remember your password can be frustrating, as a result we do all types of things to bring...
2 comments:
Saturday, April 2, 2016

QRadar - Building your first Universal DSM (UDSM)

›
So why would you want to build your own DSM? I'm glad you asked! Have you ever had a log source you would like QRadar to parse but IBM d...
28 comments:

Intelligence Driven Cyber Analysis

›
Recently I was having a discussion about the importance of ensuring proper context, relevance and intelligence is provided when performing ...

5 tips for tuning your cyber security environment

›
Tuning your environment is the only way to ensure that you are not drowning in alerts and or some oth er form of notification . To help you...
1 comment:
Sunday, March 27, 2016

Learning about Mimikatz, SkeletonKey, Dumping NTDS.dit and Kerberos with Metasploit - Volatility Memory Analysis

›
Still continu ing this journey looking into learning about Mimikatz, SkeletonKey, Dumping NTDS.dit and Kerberos with Metasploit, the focu...