SANS Network Forensic Puzzle #1 Howto from pstutz on Vimeo. This is a quick demonstration of how I approached the first SANS Network Forensic Challenge. Tools used were Wireshark, Frhed, md5sum, Word 2007 Viewer, and Vim32. (Please play this demonstration in full screen mode for optimal viewing.)
Intel in LNK Files
-
I was reading a pretty interesting write-up from Seqrite regarding, in
part, the use of pseudo-polyglot documents. In this case, delivery occurred
via ZI...
5 days ago

No comments:
Post a Comment