Collaborate Disseminate
It’s over! The 4th edition of Botconf just finished and I’m in the train back to Belgium writing the daily wrap-up. Yesterday, the reception was organized in a very nice place (the “Chapelle de la Trinité”). Awesome place, awesome food, interesting chats as usual. To allow people to recover smoothly,
[The post Botconf 2016 Wrap-Up Day #3 has been first published on /dev/random]
The second is over, so here is my daily wrap-up! After some welcomed coffee cups, it started sharp at 9AM with Christiaan Beek who spoke about Ransomware: “Ransomware & Beyond”. When I read the title, my first reaction was “What can be said in a conference like Botconf about ransomware?”.
[The post Botconf 2016 Wrap-Up Day #2 has been first published on /dev/random]
This is already the fourth edition of the Botconf security conference, fully dedicated to fighting malware and botnets. Since the first edition, the event location changed every year and it allowed me to visit nice cities in France. After Nantes, Nancy and Paris, the conference invaded Lyon. I arrived yesterday in
[The post Botconf 2016 Wrap-Up Day #1 has been first published on /dev/random]
I published the following diary on isc.sans.org: “Free Software Quick Security Checklist“. Free software (open source or not) is interesting for many reasons. It can be adapted to your own needs, it can be easily integrated within complex architectures but the most important remains, of course, the price. Even if
[The post [SANS ISC Diary] Free Software Quick Security Checklist has been first published on /dev/random]
Continue reading [SANS ISC Diary] Free Software Quick Security Checklist
I published the following diary on isc.sans.org: “Example of Getting Analysts & Researchers Away“. It is well-known that bad guys implement pieces of code to defeat security analysts and researchers. Modern malware’s have VM evasion techniques to detect as soon as possible if they are executed in a sandbox environment. The same applies
[The post [SANS ISC Diary] Example of Getting Analysts & Researchers Away has been first published on /dev/random]
Continue reading [SANS ISC Diary] Example of Getting Analysts & Researchers Away
I published the following diary on isc.sans.org: “Full Packet Capture for Dummies” When a security incident occurred and must be investigated, the Incident Handler’s Holy Grail is a network capture file. It contains all communications between the hosts on the network. These metadata are already in goldmine: source and destination
[The post [SANS ISC Diary] Full Packet Capture for Dummies has been first published on /dev/random]
Continue reading [SANS ISC Diary] Full Packet Capture for Dummies
When I analyzed the data collected during the last BruCON edition, I had the idea to correlate the timeslots assigned to talks with the amount of Internet traffic. First a big disclaimer: My goal is not to judge the popularity of a speaker or the quality of his/her presentation but
[The post Popularity of a Talk VS. Internet Usage? has been first published on /dev/random]
The eighth BruCON edition is already over! Don’t expect a wrap-up because I just don’t have time. I’m always keeping an eye on the attendees’ bits & bytes! Based on the first feedback that I received from attendees and speakers, it was another good edition but, from a network point
[The post Debriefing the BruCON Network has been first published on /dev/random]
The third day is already over! I’m just back at home so it’s time for a last quick wrap-up before recovering before BruCON which is organized next week! Damien Cauquil started the first batch of talks with a presentation of his new framework: “BTLEJuice: the Bluetooth Smart Man In The Middle
[The post Hack.lu 2016 Wrap-Up Day #3 has been first published on /dev/random]
I published the following diary on isc.sans.org: “Spam Delivered via .ICS Files“. Yesterday, I received a few interesting emails in my honeypot. I set up catch-all email addresses for domains that are well known by spammers. I’m capturing emails and extracting MIME attachments for further analysis. Today, my honeypot received three
[The post [SANS ISC Diary] Spam Delivered via .ICS Files has been first published on /dev/random]
Continue reading [SANS ISC Diary] Spam Delivered via .ICS Files