• Jul 10, 2017

    Volatility, my own cheatsheet (Part 3): Process Memory

    Let’s try to analyze the memory in more detail… If we try to analyze the memory more thoroughly, without focusing only on the processes, we can find other interesting information. memmap The memmap command shows you exactly which pages are memory… read more »
  • Jul 7, 2017

    The secret reason we eat meat

    Why do humans eat meat? Dr. Melanie Joy believes humans eat meat due to the long-engrained ideology of carnism: “Carnism is a dominant ideology, which means it’s embedded deeply in society to the point that it’s considered ‘just the way things are,’”… read more »
  • Jul 6, 2017

    Malware persistence techniques

    Once executed on target system, a malware try to hide itself and achieving persistence on the exploited machine, in order to continue to act even after system reboot. Today let’s try to focus on Windows systems, which have a lot… read more »
  • Jul 5, 2017

    Andres Segovia concert on Italian television

    A valuable historical document In the 1960s, the Italian TV broadcaster RAI broadcast a fascinating concert by Andres Segovia.I’ve found a copy on Youtube, the sound is slightly distorted, but the program very respectable: 1:27 — “Da un Codice Lautenbuch”, Six lute… read more »
  • Jul 4, 2017

    Fileless Malware for Dummies

    Just some random thoughts about this kind of threat Some days ago, a non-technical friend asked me some informations about ‘fileless malware’. Has been pretty difficult to explain this concept to a person lacking a correct security knowledge, so i have… read more »
  • Jul 3, 2017

    Volatility, my own cheatsheet (Part 2): Processes and DLLs

    Once identified the correct profile, we can start to analyze the processes in the memory and, when the dump come from a windows system, the loaded DLLs. pslist To list the processes of a system, use the pslist command. This walks the… read more »
  • Jun 30, 2017

    Information gathering tools

    Using OSINT sources for penetration testing In early stages of a penetration test is a best practice the gathering of the most detailed information about the target, also using public data and search engines. Below there is my short list… read more »
  • Jun 29, 2017

    Python for malware analysis

    Six Python tools useful for identify and analyse malware Python is a very used scripting language in the field of computer forensics and malware analysis. Today, we look at some of the tools developed in this scripting language that are useful… read more »