Defensive Security – Page 5

Metasploit Basics, Part 14: Updating the msfconsole

December 1, 2023January 1, 2024Occupy The Web

Welcome back my novice hackers! Recently, I have received numerous questions regarding how to update the msfconsole built into Kali. Until recently that was an easy question to answer. You simply enter “msfupdate” at the command line. Now, Rapid7–the developers of Metasploit– have changed how we update Metasploit when it is built into an operating […]

Digital Forensics, Part 10: Mobile Forensics (Android)

November 30, 2023January 1, 2024Occupy The Web

Over the past decade or so, the growth of the mobile market has been the fastest growing segment of the IT industry. We now have portable smart phones and tablets being used throughout the consumer and business market. These add an extra challenge to the forensic investigator, but can also contain a cornucopia of information […]

Reverse Engineering Malware: Why YOU Should Study Reverse Engineering Malware

November 26, 2023September 25, 2024Occupy The Web

I am about to embark upon probably the most technically demanding tutorial series, Reverse Engineering Malware. Before I do so, I thought I would take a few moments to explain why YOU should study and invest your time into reverse engineering. Please take a moment to read the following and then, hopefully, decide whether this […]

Reverse Engineering Malware, Part 4: Windows Internals

November 26, 2023November 26, 2023Occupy The Web

Welcome back to my Reverse Engineering Malware series. In general, reverse engineering of malware is done on Windows systems. That’s because despite recent inroads by Linux and the Mac OS, Windows systems still comprise over 90% of all computing systems in the world. As such, well over 90% of malware is designed to compromise Windows […]

Reverse Engineering Malware, Part 3: IDA Pro Introduction

November 26, 2023September 25, 2024Occupy The Web

Welcome back to my Reverse Engineering Malware course! This course is designed for those of you who want to ascend to the pinnacle of Digital Forensics and Cyber Security. There are many tools available for reverse engineering, but one disassembler stands alone. Nearly everyone in this industry uses IDA Pro to some extent. IDA Pro […]

Digital Forensics, Part 9: Extracting EXIF Data from Graphics Files

November 25, 2023November 25, 2023Occupy The Web

In many cases when a computer, phone, or mobile device is seized for evidence, the system will have graphic images that might be used as evidence. Obviously, in some cases these graphic images may be the evidence such as in child pornography cases. In other situations, the graphic images may tell us something about where […]

Vault7 Reveals that Even the CIA Reverse Engineers Malware to Re-Use Code

November 20, 2023September 25, 2024Occupy The Web

The recent CIA data dump from Wikileaks named Vault7, reveals many things about the CIA’s cyber intelligence efforts. For my part, the revelation that much of the malicious code that the CIA uses to spy on foreign nationals from around the world, uses “snippets” of code from known public malware was among one of the […]

Digital Forensics, Part 7: Browser Forensics

November 12, 2023December 31, 2023Occupy The Web

This is the seventh installment in my Digital Forensics series. To read the first 6, please click here. Often, the web browser that a suspect uses can provide us a bounty of information on what the suspect was doing online before the capture of the system. Since so much activity is conducted using the browser […]

Digital Forensics, Part 6: Analyzing Windows Pre-fetch Files for Evidence

November 11, 2023November 11, 2023Occupy The Web

This is the sixth tutorial in my Digital Forensics series. If you would like to read the previous 5, go the Forenics tab at the top of the Menu bar to find the first 5. Introduction to the Windows Prefetch System Obviously, Microsoft did not implement the prefetch system for forensic analysis, but rather to […]

Digital Forensics, Part 4: Finding Key Evidence in the Forensic Image

November 7, 2023December 31, 2023Occupy The Web

In the previous articles in this series, we captured an forensic image of the suspect’s hard drive, we captured a forensic image of the suspect’s RAM and we had used Autopsy to recover deleted files from our first image. In this lab, we will use Autopsy to do file analysis. In order words, we will […]

Category: Defensive Security