Monthly Archives: February 2010
Windows Password Recovery
To follow up on the forensics post the other day, there are lots of easy easy ways to recover passwords from a Windows PC. One of my favorite software developers, NirSoft, has a whole page of free tools for just … Continue reading
TDSS Rootkit – Windows BSOD Patch
This is a really good writeup from the guys over at Microsoft’s Threat Research & Response Blog about the recent Windows patch that causes PC’s infected with a specific piece of malware to BSOD after restart. A pretty technical read, … Continue reading
Mac Forensics
When doing forensic analysis of a host, 99% of courses focus on the Windows OS. If you’re lucky and get to take the SANS 508 class, they’ll talk for a bit on Linux/Unix forensics too. Lacking however is a decent … Continue reading
Don’t be a Crackhead
Last in a good series about staying safe online, Dave Harley of ESET talks about the dangers of using cracked and/or pirated software. While not only illegal, serial number generators and ‘pre-cracked’ software is notorious for being a carrier for … Continue reading
MitM Attacks & More
I had the wonderful opportunity to have Bryce Galbraith as my SANS 401 instructor a while back and now he’s offering some of his presentations online. I have to say, it’s all quality material and I’ll be checking back often … Continue reading
2500+ Companies Hacked
While this is scary, it’s not entirely unexpected. One of the largest attack vectors today is malicious PDF files. Give 100 people an email with a PDF attached, at least 25 are going to open it (my own unscientific personal … Continue reading
Google Buzz Lawsuit
I’ll admit, I’m a Google user. I use their email, analytics, ads, search functions, and a lot of other features. Yes, Google probably has more info on me than I can shake a stick at. Yes, Google could probably impersonate … Continue reading
Mac Nessus Compliance Checks
An increasing trend in large Enterprise environments is a NAC (Network Access Control) implementation for increased security and network segregation. Basic overview is as follows (from wikipedia) When a computer connects to a computer network, it is not permitted to … Continue reading
Command Line Kung Fu
I’m featured on last week’s Command Line Kung-Fu hosted by Ed Skoudis and company talking about how to search for certain text string in a directory and all its subdirectories, but only in files of type text, ascii, etc. from … Continue reading
About Port22
I’m an IT Security Admin working in the Washington DC area. I deal with a wide variety of security issues in my daily job including malware analysis, client and website vulnerability scanning, policy development and auditing, network access control, and … Continue reading