I had read WFA 2/e a while back and just kept forgetting to post a review. Well, the wait is over One caveat though…. I have not read WFA 1/e, so I cannot compare what differences may exist between the two books. With that said, read on….. Traditional Digital Forensics methodology was to pull the [...]
Posts Tagged ‘windows’
Book Review: Windows Registry Forensics by Harlan Carvey
July 28th, 2011
2 Comments
Windows Registry Forensics by Harlan Carvey is a book that I had picked up some months ago on sale (50% off) from the Publisher and had just didn’t have the time to read it until recently. Once I picked it up though, I could not put it down. Harlan Carvey has placed his knowledge and [...]
Microsoft advises of fixes to avoid the .lnk/.pif file vulnerability
July 23rd, 2010
1 Comment
Microsoft has posted both a software and a manual fix/workaround that will help mitigate the .lnk and .pif file vulnerability on their Support page. This vulnerability can allow a someone remote access to your Windows machine from Windows XP all the way up through Windows 7. Use either of the workarounds until Microsoft issues an [...]
Episode 14- Shutting down Windows AutoRun
June 8th, 2010
1 Comment
In this episode, I highlight some news stories and I discuss how to Disable the AutoRun feature of Windows XP/Vista/7. Show Notes: Google not using Windows anymore- http://www.ft.com/cms/s/2/d2f3f04e-6ccf-11df-91c8-00144feab49a.html Mac Spyware- http://blog.intego.com/2010/06/01/intego-security-alert-osxopinionspy-spyware-installed-by-freely-distributed-mac-applications/ LikeJacking on Facebook- http://isc.sans.edu/diary.html?storyid=8893&rss http://www.sophos.com/blogs/gc/g/2010/06/02/click-paramore-naked-photo-leaked-facebook-link/ http://www.eweek.com/c/a/Security/Facebook-Likejacking-Attacks-Continue-to-Snare-Users-286834/ http://www.readwriteweb.com/archives/likejacking_takes_off_on_facebook.php 2010 Forensic4cast Awards- http://forensic4cast.com/?p=612 IBM distributes USB drives with malware- http://www.scmagazineus.com/ibm-distributed-infected-usb-drives-at-conference/article/170862/ Disabling Windows AutoRun feature- http://support.microsoft.com/kb/967715 Podcast: [...]
