DLL Search Order Hijacking Revisited
September 1 2010Since my last blog post on the topic of DLL Search Order Hijacking there has been a lot of community activity in this area....
Read moreReversing Malware Command and Control: From Sockets to COM
August 16 2010On a Windows host there is more than one way for a program to communicate across the internet. When reverse engineering a piece ...
Read moreMalware Persistence without the Windows Registry
July 15 2010For an attacker to maintain a foothold inside your network they will typically install a piece of backdoor malware on at least one ...
Read moreThe changing battlefield in Memory
August 13 2009Steve Davis and I gave a talk at Blackhat and at Defcon called Metasploit Autopsy: Reconstructing the scene of the...
Read moreThe changing battlefield in Memory
August 13 2009Steve Davis and I gave a talk at Blackhat and at Defcon called Metasploit Autopsy: Reconstructing the scene of the...
Read moreThe changing battlefield in Memory
August 13 2009Steve Davis and I gave a talk at Blackhat and at Defcon called Metasploit Autopsy: Reconstructing the scene of the...
Read moreThe changing battlefield in Memory
August 13 2009Steve Davis and I gave a talk at Blackhat and at Defcon called Metasploit Autopsy: Reconstructing the scene of the...
Read moreNew Audit Viewer for Memoryze
November 25 2008If you are tired of trying to load Memoryze's results into Internet Explorer or into an Excel spreadsheet, check out the new viewer from Peter Silberman. The Audit Viewer...
Read moreNew Audit Viewer for Memoryze
November 25 2008If you are tired of trying to load Memoryze's results into Internet Explorer or into an Excel spreadsheet, check out the new viewer from Peter Silberman. The Audit Viewer...
Read moreNew Audit Viewer for Memoryze
November 25 2008If you are tired of trying to load Memoryze's results into Internet Explorer or into an Excel spreadsheet, check out the new viewer from Peter Silberman. The Audit Viewer...
Read more
Recent Comments