Sarah Edwards will be presenting two topics at the summit on June 26 & 27.
- “When Macs Get Hacked”
- “Analysis & Correlation of Macintosh Logs”
Rumor is the presentations will be streamed live if you can’t make it to the summit!
Search
Subscribe to our RSS feed!
-
Recent Posts
- SANS DFIR Summit in Austin, TX
- Come see us at CEIC in Vegas!
- Reading Mac BSM Audit Logs
- File Type Identification and Its Application for Reversing XOR Encryption
- On the Difficulty of Autonomous Pornography Detection
- Harris @ DoD Cyber Crime Conference 2012
- Port-Independent SSL Detection
- How can VMware’s Virtual Disk Development Kit help the forensic examiner?
- The Apple System Log – Part 2 – Console.app
- Decoding Data Exfiltration – Reversing XOR Encryption
- The Apple System Log – Part 1
- A Thought Provoking Way of Analyzing wtmp Files
- Virtual Machine Data Recovery Using the Open VMFS Driver
- Addressing Malware Issues from an Operational Perspective
- Virtual Machine Files Essential to Forensic Investigations
- Resurrecting “Dead” Images for Live Analysis
- Prefetch Files at Face Value
- Crack and Image a FileVault Sparsebundle
- TypedURLs (Part 2)
- TypedURLs (Part 1)
Categories
- Conferences (3)
- Digital Forensics (16)
- Malware Reverse Engineering (5)
- Network Forensics (2)
Tags
analysis apple apple system log ASCII ASL BSD bypass computer security conference console crack Data Exfiltration Decryption encryption ESX ESXi extract files filevault forensics Free BSD FTP hex hexplorer image incident response information assurance internet explorer log log analysis login logs mac Macintosh malware memory mount mountimage pro nvram obfuscation OpenVMFS osx OS X prefetch regedit registry shadow sparsebundle stream syslog TCP typedURLs UDP VDDK vfae VFC virtual virtual forensics virtual machine VM artifact vmdk vmem vmforensic vmfs vmsd vmsn vmss vmware vmx vmxf vswp windows wireshark wtmp XOR-
Join 838 other subscribers
Blog Archive
- June 2012 (1)
- May 2012 (2)
- April 2012 (2)
- January 2012 (3)
- August 2011 (1)
- July 2011 (1)
- June 2011 (3)
- May 2011 (3)
- April 2011 (1)
- March 2011 (3)
- February 2011 (1)
Crucial Security Forensics Blog 