Collaborate Disseminate
I have 2 Windows servers and would like to set up encrypted communication between them using TLS. I’ve been reading up on TLS and X.509 certificates and I think I have a reasonable plan, but would like some feedback to correc… Continue reading Bidirectional encrypted server to server communication using TLS
I had been going through the SANS FOR610 Reverse Engineering Malware content OnDemand recently and last week I knocked out the GREM. I figured it would be a good time to post a few thoughts on it and talk about … Continue reading → Continue reading GREM Achievement Unlocked
It’s been a bit since my last post and in that time I’ve been to two SANS conferences, Blackhat and Defcon. It’s been a great but busy few months. A few weeks ago I was presenting at a local forensics … Continue reading → Continue reading How Long Do Truecrypt AES Keys Remain In Memory?
A few days ago someone told me that they weren’t able to install Crackulous on their jailbroken iOS device and asked if I could recommend an alternative they could use to decrypt iOS apps. Since Crackulous was a GUI frontend … Continue reading → Continue reading A Quick Guide to Using Clutch 2.0 to Decrypt iOS Apps
Earlier this week I walked into a friend’s office and he had just finished examining an iPhone using Cellebrite. The good news is that the acquisition went flawlessly. The bad news was that the device contained over 200 videos that … Continue reading → Continue reading New Video Preview Utility to Help With Forensics Analysis
It’s been an extremely busy start to the year but I wanted to make a quick post to talk about what I’ve been up to so far. Last month I got to attend my first SANS DFIR specific event when … Continue reading → Continue reading Long Overdue 2015 Update
I understand PPTP is widely used still, but insecure. A convenient alternative is: L2TP+IPSEC.
How secure is it?
What steps in the server setup can I take to maintain a high degree of compatibility with Windows 7+ and OSX clients and sti… Continue reading How secure is L2TP+IPSEC?
I planned on doing a few blog posts in December but due to a few great December surprises I wasn’t online much. My month started off by taking a much needed relaxing week of vacation in San Diego with my … Continue reading → Continue reading 2015 is Upon Us
Recently on the SANS DFIR mailing list one of the members announced he had put together a Network Forensics challenge for anyone who wanted to participate. The challenge is at http://blog.mywarwithentropy.com/2014/11/spy-hunter-holiday-challenge-2014.html where you can download a large pcap and a … Continue reading → Continue reading New Network Forensics Challenge
I recently attended the SANS SEC575 Mobile Device Security and Ethical Hacking class in Las Vegas and I wanted to post some of my thoughts on the course. Day One: Architecture and Management Day one started off with a quick … Continue reading → Continue reading SANS SEC575 Mobile Device Security and Ethical Hacking Review