Trust but verify. The famous quote by Ronald Reagan was formed from a Russian Proverb. This was life in 1987. In 2024, life in the new threat landscape is Zero-Trust. The Australian Government has released it’s latest update to the…
I had planned to write a one-liner for this post, but I think it deserves more context.The point of reporting is to tell a story, one that flows. This piece of advice during my time at a consultancy sounded easier…
This is a work in progress, but has the fundamentals of what you should do. Apologies for the jargon that’s included, I would recommend sharing this with the person who is assisting you with the wiping of devices in an…
Don’t Deny It! When you were a child, did you ever do something that you shouldn’t have, and when caught and subsequently questioned by your parents as to whether you just did something which is blaringly obvious, did you deny…
Things are different in the world of techs compared to the world of Executives. We have more time, more interest in a level of detail,more desire to chew the fat over a topic. Executives don’t have this luxury. In fact…
Jumping straight back in with no news of what’s been happening, apart from a new job, and me generally forgetting about this altogether. If you want a simple way to get timelining with log2timeline & plaso, running it on Ubuntu…
So I’ve got to be quick while writing this, as I’m about to go back home after a week of training. I’ve been feeling the guilt for some time, knowing that I entirely missed posting in April and it was…
When I had been given the better part of 8gb of logs recently and was playing with a trial licence of splunk, I was in between a rock and a hard place. I had a string to search for, but…
After days of going through pages of doco, running tests on terabytes of files, I finally made it all work. log2timeline.py myhost.plaso sourceimage.vmdk #myhost.plaso is going to be the output body file for psort. This creates the metadata and…
One of the main challenges when using new tools is knowing what the output is going to look like once you’re done. Does it present itself in a visually appealing way, does it contain what you need, etc. As part…