Andrea Fortuna
AboutSearch
Tools
DFIR Toolkit OSINT Toolkit
  • Aug 27, 2018

    Check your system for several "speculative execution" vulnerabilities with a single bash script

    After the first disclosure of CVEs related to speculative execution vulnerabilities (Meltdown and Spectre) on CPUs, a lot of researcher started to analyze the CPUs in order to find other vulerabilities and possible exploit techniques. … read more »
  • Aug 24, 2018

    Adelita, by Francisco Tárrega: my Ukulele rendition

    Adelita is a mazurka written by Francisco Tárrega: along with Capricho Árabe and Recuerdos de la Alhambra, it is one of his best-known works. … read more »
  • Aug 20, 2018

    pycodeinjector: a simple python Code Injection library

    In my previous post “Code injection on Windows using Python: a simple example”, i’ve explored the ctype python library and the usage of Windows API in order to perform a code injection on 32bit systems. … read more »
  • Aug 13, 2018

    Vikram Sharma talks about quantum random number generators and cryptography

    How quantum physics can make encryption stronger … read more »
  • Aug 6, 2018

    Code injection on Windows using Python: a simple example

    Recently i had to perform some comparative tests on a couple of whitelisting solutions. … read more »
  • Aug 1, 2018

    Diffy: an interesting DFIR tool released from Netflix's SIRT

    The Netflix Security Intelligence and Response Team (SIRT) has released (under Apache 2.0 license) a triage tool to help digital forensics and incident response teams quickly identify compromised hosts on which to focus their response. … read more »
  • Jul 30, 2018

    Malhunt: automated malware search in memory dumps

    Recently i’ve published this post focused on hunting malware using volatility and Yara rules. … read more »
  • Jul 27, 2018

    Julian Bream: My Life in Music

    A 2 hour video biography of the great guitarist Julian Bream. … read more »
  • Jul 25, 2018

    Digital forensics chronicles: image identification issues on large memory dump with Volatility

    Spoiler: shame on DumpIT! … read more »
  • Jul 23, 2018

    Some thoughts about Lateral Movement techniques

    The ability to quickly and reliably detect lateral movement in the network is one of the most important skills in information security today: the lateral movement attack phase represents the biggest difference between a targeted and strategic attacks and a simplistic… read more »
  • Jul 20, 2018

    Friday suggested listening: Paco De Lucia, Concierto de Aranjuez

    Joaquín Rodrigo’s Concierto de Aranjuez is one of the most popular concertos of all time, one of the most original masterpieces of the 20th century. … read more »
  • Jul 18, 2018

    TCPDUMP: a simple cheatsheet

    Having a solid grasp of tcpdump is mandatory for anyone desiring a thorough understanding of TCP/IP. … read more »
  • Jul 16, 2018

    Finding malware on memory dumps using <a href="https://www.andreafortuna.org/volatility/">Volatility</a> and Yara rules

    Previously i’ve talked a lot about Volatility, and i’ve published also some articles about YARA. … read more »
  • Jul 13, 2018

    Shape of my Heart, my own guitar rendition in Drop D tuning

    “Shape of My Heart” is a song by Sting from his album “Ten Summoner’s Tales”, released in 1993. … read more »
  • Jul 11, 2018

    Application whitelisting on critical Windows systems: useful or not?

    Application whitelisting is the practice of specifying an index of approved software applications that are permitted to be present and active on a computer system. … read more »
  • Jul 9, 2018

    Nano text editor: my own cheatsheet

    Which is the best command line text editor? Seriously, i don’t know! … read more »
  • Jul 6, 2018

    Suggested listenings: "Villa-Lobos plays Villa-Lobos"

    Recently i have found on YouTube some wonderful recordings of Heitor Villa-Lobos playing his own music. … read more »
  • Jul 4, 2018

    Docker images under cryptojacking attack: how to check if a downloaded image is safe

    Researchers at Kromtech Security Center discovers seventeen malicious Docker containers with embedded cryptominer applications that permitted to cybercriminals to earn $90,000 in 30 days. … read more »
  • Jul 2, 2018

    Bash scripting: my own cheatsheet

    bash (Bourne Again shell) is the standard GNUshell, a powerful tool for the advanced and professional user. … read more »
  • Jun 29, 2018

    "Into The Flow", a new brief fingerstyle study

    This little piece has an interesting story. … read more »
« Previous page Next page »

Andrea Fortuna

  • Andrea Fortuna
  • andrea@andreafortuna.org
  • andreafortuna
  • andreafortunaig
  • andrea-fortuna

Cybersecurity expert, software developer, experienced digital forensic analyst, musician