Threat Level: Infocon green

Diaries by Keyword: ICS

DateAuthorTitle
2014-03-07Tom WebbLinux Memory Dump with Rekall
2014-02-09Basil Alawi S.TaherMandiant Highlighter 2
2014-01-10Basil Alawi S.TaherWindows Autorun-3
2013-12-12Basil Alawi S.TaherAcquiring Memory Images with Dumpit
2013-11-21Mark Baggett"In the end it is all PEEKS and POKES."
2013-11-20Mark BaggettSearching live memory on a running machine with winpmem
2013-11-19Mark BaggettWinpmem - Mild mannered memory aquisition tool??
2013-08-26Alex StanfordStop, Drop and File Carve
2013-08-14Johannes UllrichImaging LUKS Encrypted Drives
2013-07-12Rob VandenBrinkHmm - where did I save those files?
2013-05-23Adrien de BeaupreMoVP II
2013-04-25Adam SwangerSANS 2013 Forensics Survey - https://www.surveymonkey.com/s/2013SANSForensicsSurvey
2013-02-20Manuel Humberto Santander PelaezSANS SCADA Summit at Orlando - Bigger problems and so far from getting them solved
2012-11-02Daniel WesemannThe shortcomings of anti-virus software
2012-09-14Lenny ZeltserAnalyzing Malicious RTF Files Using OfficeMalScanner's RTFScan
2012-07-16Jim ClausingAn analysis of the Yahoo! passwords
2012-06-04Lenny ZeltserDecoding Common XOR Obfuscation in Malicious Code
2011-09-29Daniel WesemannThe SSD dilemma
2011-08-05Johannes UllrichForensics: SIFT Kit 2.1 now available for download http://computer-forensics.sans.org/community/downloads
2011-03-01Daniel WesemannAV software and "sharing samples"
2010-11-26Mark HofmanUsing password cracking as metric/indicator for the organisation's security posture
2010-11-17Guy BruneauReference on Open Source Digital Forensics
2010-05-22Rick WannerSANS 2010 Digital Forensics Summit - APT Based Forensic Challenge
2010-05-21Rick Wanner2010 Digital Forensics and Incident Response Summit
2010-04-30Kevin ListonThe Importance of Small Files
2010-04-11Marcus SachsNetwork and process forensics toolset
2010-03-26Daniel WesemannSIFT2.0 SANS Investigative Forensics Toolkit released
2009-12-14Adrien de BeaupreAnti-forensics, COFEE vs. DECAF
2009-11-25Jim ClausingUpdates to my GREM Gold scripts and a new script
2009-10-20Raul SilesWASC 2008 Statistics
2009-08-18Daniel WesemannForensics: Mounting partitions from full-disk 'dd' images
2009-08-13Jim ClausingNew and updated cheat sheets
2009-07-02Daniel WesemannGetting the EXE out of the RTF
2009-02-02Stephen HallHow do you audit your production code?
2009-01-02Rick WannerTools on my Christmas list.
2008-11-17Marcus SachsNew Tool: NetWitness Investigator
2008-09-08Raul SilesQuick Analysis of the 2007 Web Application Security Statistics
2008-08-17Kevin ListonVolatility 1.3 Released
2008-08-15Jim ClausingOMFW 2008 reflections
2008-06-18Marcus SachsOlympics Part II

Get ISC Swag!!

Advertisement

Recent Discussions

Russia and DoS created 6 days ago by Peter P

Suspiciously quiet on DNS scan activity created 1 week ago by Thomas

Outbound 6000/TCP traffic to multiple Chinese IPs? created 2 weeks ago by SniffingShadow

principle for designing a pen test testing workbencg created 3 weeks ago by Anonymous

Help on a new technique created 4 weeks ago by Anonymous

View All Forums →

Recent Diaries

Microsoft March Patch Pre-Announcement - by: Guy Bruneau (2014-03-08)

Linux Memory Dump with Rekall - by: Tom Webb (2014-03-07)

PHP 5.4.26 and 5.5.10 available. Several Security Fixes @ : http://www.php.net/downloads.php - by: Tom Webb (2014-03-07)

View Diary Archives

Search Diaries:

SANS Institute

View our Privacy Policy

Contact Us

Phone: (757) SANS-ISC (726-7472) - Voice Mail Only
Web Contact: handlers@isc.sans.edu
Report Bugs: Sourceforge Project
Debug Info: Browser Debug Info

"The experiences gained in the SANS Technology Institute program have helped me advance in IBM, taking a more public facing role."
- Jerome Radcliffe, SANS Technology Institute Student

"SANS is a 'giving back to the community factory.' SANS encourages and fosters growing security awareness and growing the security community."
- Rob VandenBrink, Alumni of SANS Technology Institute