Memory forensics on Windows 7 (x86 and x64) and Windows 2008 x64
September 21 2010Next month Memoryze will be two years old and a lot has changed over that time. There has been a lot of interesting ...
Read moreMemory forensics on Windows 7 (x86 and x64) and Windows 2008 x64
September 21 2010Next month Memoryze will be two years old and a lot has changed over that time. There has been a lot of interesting ...
Read moreMemory forensics on Windows 7 (x86 and x64) and Windows 2008 x64
September 21 2010Next month Memoryze will be two years old and a lot has changed over that time. There has been a lot of interesting ...
Read moreMemory forensics on Windows 7 (x86 and x64) and Windows 2008 x64
September 21 2010Next month Memoryze will be two years old and a lot has changed over that time. There has been a lot of interesting ...
Read moreDLL Search Order Hijacking Revisited
September 1 2010Since my last blog post on the topic of DLL Search Order Hijacking there has been a lot of community activity in this area....
Read moreReversing Malware Command and Control: From Sockets to COM
August 16 2010On a Windows host there is more than one way for a program to communicate across the internet. When reverse engineering a piece ...
Read moreMalware Persistence without the Windows Registry
July 15 2010For an attacker to maintain a foothold inside your network they will typically install a piece of backdoor malware on at least one ...
Read moreThe changing battlefield in Memory
August 13 2009Steve Davis and I gave a talk at Blackhat and at Defcon called Metasploit Autopsy: Reconstructing the scene of the...
Read moreThe changing battlefield in Memory
August 13 2009Steve Davis and I gave a talk at Blackhat and at Defcon called Metasploit Autopsy: Reconstructing the scene of the...
Read moreThe changing battlefield in Memory
August 13 2009Steve Davis and I gave a talk at Blackhat and at Defcon called Metasploit Autopsy: Reconstructing the scene of the...
Read more
Recent Comments