Tag Archives: tools

LastPass: My new favorite password manager

LastPass is a cloud based password manager.  There’s no worries as your master password is used to symmetrically encrypt your information before it it sent to LastPass.  You don’t have to worry about passwords lying around unencrypted on your disk. … Continue reading

Posted in news, privacy, security | Tagged | Leave a comment

Maltego 3 creators interviewed

In a recent Exotic Liability podcast (not PG13) Chris and Ryan interview folks from Paterva, the makers of Maltego.  You should definitely try Maltego if you’ve never used it.  They have a free version and it runs on both Windows … Continue reading

Posted in hardware & software, news, security | Tagged | Leave a comment

(tool) HTTPS Everywhere

There’s a new Firefox add-on, HTTPS Everywhere, jointly developed by Tor and the EFF.  If a website has an SSL certificate, the add-on will automatically redirect the user to the page’s https address.  The add-on comes loaded with a default … Continue reading

Posted in news, privacy, security | Tagged , | Leave a comment

win32 memory capture & analysis cheat sheet

A high level overview to perform live memory captures and analysis: capture memory via moonsol’s win32dd parse memory snapshot with mandiant’s memoryze analyze results via audit viewer or analyze using the volatility framework — neatly packaged in SAN’S Sift Workstation

Posted in forensics, malware, microsoft, pentest, security | Tagged , | Leave a comment

(Tool) FireShark: Aid for web incident response

The tool of the day is FireShark, a free web analysis tool.  This is great to have in your toolbox for IR.  FireShark will generate a mind map of a given webpage — think of it being a graphical representation … Continue reading

Posted in forensics, news, security | Tagged , | Leave a comment

DNS Performance & Security…

I’ve gotten tired of Road Runner’s DNS redirection/hijacking service which I opt out of yet it keeps coming back.  I decided to do some DNS benchmarking, comparing my assigned ISP name servers against publicly provided DNS such as Google.   The … Continue reading

Posted in google, news, security | Tagged , | Leave a comment

do you know where your pr0n is?

In 2008, Data Loss Prevention (DLP) was becoming the latest trend, hype, buzzword.  This slowed down in 2009 as with most technology because of everyone tightening their belt (purse strings).  I’ve been wondering how long it was going to take … Continue reading

Posted in networking, news | Tagged , | Leave a comment

Analyzing Malicious PDF Documents

So you want to get your feet wet? Grab Didier Stevens tools here: http://blog.didierstevens.com/programs/pdf-tools/ Grab malicious PDF samples here: http://www.malwaredomainlist.com/mdl.php?search=pdf+exploit&colsearch=All&quantity=50 *Be careful, these are live samples! Video Tutorial: Didier on analyzing a PDF Document: http://www.youtube.com/v/tHVi2wKCkTc You’re going to run into … Continue reading

Posted in forensics, malware, news, security | Tagged , , , , | Leave a comment