Raspberry Pi Zero Contest Grand Prize Winners!

The Raspberry Pi Zero Contest presented by Adafruit and Hackaday came to a close last week, as the clock struck 11:59 am on Sunday, March 13, 2016. Since then our team of judges has been working to pick the top three entries. It was a hard job sorting through nearly 150 amazing creations.  In the end though, the judges were able to pick three grand prize winners. Each winner will receive a $100 gift card to The Hackaday Store.  So let’s get to the winners!

  • [shlonkin] with Classroom music teaching aid
  • [JohSchneider] with PiGrrl-Zero
  • [Markus Dieterle] with TextEye: Raspberry Pi

…read more

Continue reading Raspberry Pi Zero Contest Grand Prize Winners!

PlugX: Memory Forensics Lifecycle with Volatility

At OSDFCon last week, we discussed a case study showing how we identified manipulated memory artifacts in an infected environment. We were then able to rapidly introduce new capabilities to Volatility that could be used proactively in other environment… Continue reading PlugX: Memory Forensics Lifecycle with Volatility

PlugX: Memory Forensics Lifecycle with Volatility

At OSDFCon last week, we discussed a case study showing how we identified manipulated memory artifacts in an infected environment. We were then able to rapidly introduce new capabilities to Volatility that could be used proactively in other environment… Continue reading PlugX: Memory Forensics Lifecycle with Volatility

Results from the 2015 Volatility Plugin Contest are in!

The competition this year was fierce! We received 12 plugins to the contest. Similar to last year, ranking the submissions was one of the hardest things we’ve had to do. Each plugin is unique in its own way and introduces a capability to open sourc… Continue reading Results from the 2015 Volatility Plugin Contest are in!

Results from the 2015 Volatility Plugin Contest are in!

The competition this year was fierce! We received 12 plugins to the contest. Similar to last year, ranking the submissions was one of the hardest things we’ve had to do. Each plugin is unique in its own way and introduces a capability to open sourc… Continue reading Results from the 2015 Volatility Plugin Contest are in!

Recovering TeamViewer (and other) Credentials from RAM with EditBox

I recently stumbled upon the TeamViewer-dumper-in-CPP project, which shows just how easy it is to recover TeamViewer IDs, passwords, and account information from a running TV instance by enumerating child windows (on a live machine). The method is based on sending a WM_GETTEXT message to the TV GUI controls that contain the credentials. In particular, we’re looking for the two fields under the " Continue reading Recovering TeamViewer (and other) Credentials from RAM with EditBox