Introduction
This blog post is the second in a three-part series covering our
Windows 10 memory forensics research and it coincides with our BlackHat
USA 2019 presentation. In Part
One of the series, we covered the integration of the researc…
I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following information:
Date
Description of transaction
Am…
Several sources estimate that by the year 2020 some 50 billion IoT devices will be deployed worldwide. IoT devices are purposefully designed to connect to a network and many are simply connected to the internet with little management or oversight. Such…
When using the web message response mode spec with OpenID Connect for silent authentication, what prevents an attacker leveraging an XSS attack from registering a "message" listener and intercepting authorization messages (a code…
An administrator of an AWS account wants their users to be able to create their own S3 buckets, SQS queues, and KMS keys and attach resource-based IAM policies to their resources. How can said administrator find resources that have resourc…
This organization I’m working for uses OpenDNS/Cisco Umbrella. I’m confused as to why I’m seeing requests for SSL traffic resolved to
146.112.255.155
146.112.250.83
146.112.250.64
146.112.250.87
146.112.250.73
Are these sinkholed IP add…
In a bunch of APIs, there are several possible query parameters. Some of these may be PHI. So even if we are using HTTPS, they could go to a logfile or somewhere else and hence violate PHI.
Was thinking of an approach where the paramete…
I have a piece of software that monitors C:\Folder1. It keeps it in sync with C:\Folder2. It encrypts everything in C:\Folder2.
I want to sync Folder2 to my Google Drive. But this additional encryption step is silly if they could scan my …
I’m modifying an ASPNET MVC 5 web site and a requirement is to allow users to upload an XML and PDF file.
The XML file will be used to layout text on the PDF based on variables coming from within the system.
I have a schema for the XML …
Type: Threat AnalysisResurgent Iron Liberty Targeting Energy SectorSince at least 2010, the IRON LIBERTY threat group has targeted the energy sector with a particular focus on industrial control systems (ICS).
