解析メモ

マルウェア解析してみたり解析に役に立ちそうと思ったことをメモする場所。このサイトはGoogle Analyticsを利用しています。

4n6 Week 47 – 2023 - FORENSIC ANALYSIS

本エントリは This Week in 4n6 (FourAndSix=Forensics) で紹介された各記事の冒頭を表示し、チェックする記事をザッピングするために自動生成&投稿したものです。4n6 は こちら からご確認いただけます。

FORENSIC ANALYSIS

Emi Polito at Amped

Emi Polito November 14, 2023 G’day folks and thank you for coming back to our blog and checking out another article of our “Learn and solve it with Amped FIVE”. Today we are going to talk about issues deriving from the curved shape of camera lenses and how to correct optical distortion. If you analyze shapes and sizes of subjects and objects on video or, indeed, if you conduct measurements on surveillance cameras, then you will want to read on! Contents 1 The Root Cause of Lens Distortion 2 Barr...

Amr Ashraf

19 minute read On this page Scenario Initial Evidence Collecting Setup & Validate Evidence Memory Analysis Yara scan Disk Analysis AntiVirus Scan Application Analysis Post Exploitation Unknown Malware Analysis Network Analysis Compromised DHCP Server Analysis Web Servers Investigation mysportclub server coloserver1337.myhosting.ex Hosting Server Analysis Summery Resources Scenario The customer’s organization has found out that some of its sensitive data have been detected in an online text-shari...

Atola

Report this article Atola Technology Atola Technology Fast forensic imaging. Even with bad drives. Published Nov 13, 2023 + Follow Hi there!Welcome back to Plug, Image, Repeat, the monthly newsletter where we share practical tips and tricks to improve your image acquisition experience. We're delighted to have you with us.🤗When every minute counts, fast and reliable storage devices are vital for a digital forensic expert. Today we're going to talk about target drives (also known as destination dr...

Cado Security

DebugPrivilege

Forensafe

17/11/2023 Friday The Android IMO app, developed by PageBites Inc, is a free messaging application known for its user-friendly interface and strong focus on security. With features such as text messaging, voice and video calls, media sharing, and group chats, IMO offers comprehensive messaging experience. It employs end-to-end encryption for message privacy and allows users to set self-destruct timers for added security. Digital Forensics Value of Android IMO IMO as most of instant messaging app...

Mattia Epifani at Zena Forensics

iOS 15 Image Forensics Analysis and Tools Comparison - Communication and Social Networking Apps By Mattia Epifani - November 15, 2023 The fourth episode is dedicated to the most analyzed family of applications: communication and social networking apps. Before I start, I would like to mention that I have made some corrections to the previous blog post, based on feedback by tool developers. Also, most of them have confirmed to me that they are working on improving their parsing capabilities, based...

Salvation DATA

Work Tips 2023-11-15 Content Overview Common Methods for Mobile Forensics to Extract Data Case Study Notes Content Overview Common Methods for Mobile Forensics to Extract Data Case Study Notes Overview Mobile phone forensics refers to the process of recovering digital evidence of investigative significance by collecting, preserving and analyzing mobile devices, and ultimately obtaining legally binding evidence that is acceptable to the court. Just as citizens use mobile devices, so do criminals....

Harel Segev at Sygnia

November 15, 2023 In January of 2023, Andrew Rathbun and Lucas Gonzalez published a blog post showcasing a new forensic artifact that first appeared in the 2022 update of Windows 11 (22H2). In an attempt to answer additional questions that were not covered in the blog post, Sygnia’s Incident Response team decided to expand on Rathbun and Gonzalez’s research, and dive into the inner workings of this exciting new artifact. This blog post presents our current understanding of the format and behavio...