Posts Tagged ‘Digital Forensics’

Researchers have developed many ways to extract data from computer systems by developing hidden channels. A computer with an air filter is considered to be a high-cost target, so considerable research has entailed getting data from them-without a network connection.

Robin Harris is Principal Analyst at TechnoQWAN LLC,. He wrote a post in which he tells about four groups to which the hidden channels are divided:

1. Electromagnetic channels vary from eavesdropping of electromagnetic radiation from the memory bus, to leakage from USB ports and cables. 2. Acoustic channels became popular with the advent of hacked smartphones. 3. Thermal channels will ever find a practical [...]

DumpsterFire Toolset is a modular, menu-driven, cross-platform tool for creating repetitive, time-lagged, distributed security events. The toolkit is designed for dynamic expansion, which allows you to create your own fires (event modules) to add to the included collection of Fires tools.

Daniel Pistelli shared a short post about Windows memory forensics on OSX. He described a piece of software called Profiler.

Kirtar Oz is involved in the analysis of PowerShell attacks among customers. He came up with several indicators that will help detect potential PowerShell attacks in the environment. These indicators are based on analysis and research.