Articles & Presentations

▼
Wednesday, October 29, 2014

(I) Another fine example of Malware Management working - Listen up Banking folks it's Dyre!

›
Thanks again to US-Cert for producing a perfect example of The Malware Reporting Standard output! Another teaching moment to demonstrate how...
Wednesday, October 8, 2014

(I) Further proof the Malware Management Framework WORKS! The Tyupkin ATM Malware

›
Practicing Malware Management as a part of any 'good' Information Security program, you would have caught the Tyupkin malware ...
Monday, September 22, 2014

My interview on the Security Weekly Podcast - Episode 388

›
You can find all the resources discussed in the interview for Episode 388 here: MalwareArchaeology.com #InfoSec #HackerHurricane ...
Sunday, September 21, 2014

Challenging ALL InfoSec people, malware discovery is not as hard as you think

›
After being on the Security Weekly podcast and to address a response to an email on my previous blog I decided to post this challenge to a...
Wednesday, September 10, 2014

Malware Management Framework - Home Depot would have caught their breach.. easy

›
Here we go again with the 'Breach of the Week' ... This time it is potentially larger than Target, which is the largest known...
Thursday, September 4, 2014

InfoSec Industry partly responsible for huge breaches, InfoSec Cons another part, you and management the last part

›
You know what is worse than all these HUGE Credit Card breaches? The fact that it is ridiculously easy to detect! All BackOff malware use...
Thursday, July 31, 2014

The latest BackOff PoS malware is nothing new if you practice the Malware Management Framework

›
Proof if you were practicing the " Malware Management Framework " and reading the analysis from BlackPoS that took out Targe...
Friday, July 25, 2014

Continued - Proof our industry is broken

›
Continuing on the PoneMon study... The following figure shows where the interviewees get their information. Seriously? You ask CERT and Law...
Thursday, July 24, 2014

Proof our industry is broken

›
I just read the latest Ponemon survey "Exposing the Cyber Security Cracks: A Global Perspective" and I had to laugh. The email st...
Thursday, July 10, 2014

(T) Filtering or trimming Windows logs the right way, NOT by Event ID

›
Have you ever worked with Windows logs and enabled all or a lot of auditing items and feel there are way too many events or noise? Ever enab...
Monday, June 30, 2014

(T) How to use the Windows Firewall behind a NAT router

›
Ever wanted to open up a port on your home firewall, but restrict it more than a NAT router allows with raw port 1234 to IP 1.2.3.4? Restri...
Monday, March 3, 2014

(T) A look at WHY the now infamous Credit Card breaches should have been detected and how YOU can detect these types of attacks

›
We are all too familiar with the Credit Card breaches that hit Target, Neiman Marcus, Michaels, Marriott, Holiday Inn, Sheraton, Westin,...