Posts Tagged ‘Incident Response’

This article describes how to debug the third-party Android Java code on Windows, taking into account the specifics of OS X. There is a very detailed article from @ CR0SP that will help you understand the material.

Windows NT constantly uses the terms “user mode” and “kernel mode” when discussing the architecture of the OS, so you should determine what it means. This article is divided into separate sections. The first section will discuss the user mode, and the second section will discuss the kernel mode. In both sections, the issue of the suspension and resumption of process flows is discussed.

Experts at FireEye published a report on malware Triton, which is intended to attack industrial control systems and key infrastructure facilities. Triton was first discovered in the wild in August 2017.

Charlie Osborne wrote a post in which she described how Trojan managed to destroy the main industrial systems in the Middle East. Triton was designed to interfere with the operation of security controllers. In the attack against the client, malware used the “zero day” error in the Tricon firmware to scan and compare the industrial control system and the reconnaissance. The threat of zero day is a breach in the software security system that hackers use to gain [...]

Today, cybercrime is a major problem, and malicious programs are being written to illegally obtain personal information. The development of the Internet has become one of the key factors that determined these changes.