Andrea Fortuna
AboutRss
  • Apr 9, 2018

    Digital Forensic: the Chain of Custody

    My own suggestions about keeping a Digital Chain of Custody In forensic scope, the "chain of custody" refers to the chronological documentation or paper trail that records the sequence of custody, control, transfer, analysis, and disposition of physical or electronic… read more »
  • Apr 6, 2018

    Guitar tips: How to practice productively

    Effective practice isn't just a physical exercise: most of the effectiveness it's in the mind too. From my point of view, is really important to understand that playing and practicing guitar is not the same thing. When you are playing… read more »
  • Apr 4, 2018

    How to find unsecured S3 buckets: some useful tools

    Services like Amazon’s S3 have made it easier and cheaper than ever to store large quantities of data in the cloud. Used properly, S3 buckets are a useful tool, however a lot of companies fail to implement basic security resulting… read more »
  • Mar 30, 2018

    Guitar tips: slur exercises on groups of two notes

    Left hand slurs are an essential part of a good technical practice. In this first post i will share one of my own slur exercises, involving two fingers. Slur practice can be very fatiguing. I would recommend practicing slow and… read more »
  • Mar 28, 2018

    What is the China Chopper Webshell, and how to find it on a compromised system?

    Some days ago, during a chat with a friend who works in a small software development company, the webshells topic has come up. During the migration of a production system, my friend found some suspicious .php files, which turned out… read more »
  • Mar 26, 2018

    Retrieving NTLM Hashes without touching LSASS: the “Internal Monologue" Attack

    A new technique, called "Internal Monologue Attack", allows and attack similar to Mimikatz without dumping memory area of LSASS process, avoiding antivirus and Windows Credential Guard. Mimikatz is a well-known tool which allows attackers to extract plain text passwords from LSASS… read more »
  • Mar 23, 2018

    Abel Carlevaro: his technique, his guitar, his Microstudies

    Sometimes, Youtube suggest me guitar related videos, and in most cases are very interesting contents. Yesterday, the first suggestion is a long video lesson by Abel Carlevaro: i believe is a good idea share it. Who is Abel Carlevaro? Abel… read more »
  • Mar 21, 2018

    Facebook and Cambridge Analytica: data breach or business model?

    Some thought about Cambridge Analytica and Facebook privacy settings. Recently Facebook revealed in a blog post that it suspended Cambridge Analytica and Strategic Communication Laboratories accounts for illegally accessing and sharing user data more than two years ago. Cambridge Analytica… read more »
« Previous page Next page »

Andrea Fortuna

  • Andrea Fortuna
  • andrea@andreafortuna.org
  • andreafortuna
  • andrea-fortuna
  • andrea

Cybersecurity expert, software developer, experienced digital forensic analyst, musician