Forensic Value of Prefetch, (Thu, Oct 20th)

[This is a guest diary submitted by Logan Flook]
When a program executes on a Windows system there are many artifacts that are generated which can assist digital forensic investigations. One of particular note is the Windows Prefetch file. Found in C:\Windows\Prefetch by default, prefetch files (.pf) contain a wealth of information that can prove vital to any investigation.

Continue reading Forensic Value of Prefetch, (Thu, Oct 20th)→

Posted in Uncategorized

Are Internet Scanning Services Good or Bad for You?, (Wed, Oct 19th)

I&#;x26;#;39;m in Luxembourg to attend the first edition of the CTI Summit[1]. There was an interesting keynote performed by Patrice Auffret[2], the founder of Onyphe, about “Ethical Internet Scanning in 2022”. They are plenty of online scanners that work 24×7 to build a map of the Internet. They scan the entire IP addresses space and look for interesting devices, vulnerabilities, etc. Big players are Shodan, Onyphe, Censys, ZoomEye, etc.

Continue reading Are Internet Scanning Services Good or Bad for You?, (Wed, Oct 19th)→

Posted in Uncategorized