n0fate

volafox Co-developer, Digital Forensic Researcher

[Sarah Edwards 👩🏻‍💻🐈‍⬛ @iamevltwin]

Such an excellent tool! #DFIR #mac4n6 https://t.co/fDyVGgFfGk

[Nicolas Krassas @Dinosn]

Memory forensics of EternalBlue https://t.co/jmieFTwe2T

[Johan Berggren @jberggren]

Netflix is doing some cool stuff, Timesketch and Plaso for cloud incident response: https://t.co/jH1TNvMiCV #DFIR

[n0fate @n0fate]

@osxreverser I dont give up PC gaming. so I just bought a new mbp and solved it. ;-p

[Jessica Payne @jepayneMSFT]

Useful event log you may not be monitoring:the Task Scheduler Operational log. Scheduled tasks often used for persistence and lateral moves.

[LevelBlue @LevelBlueCyber]

Proof-of-concept Confirms @Nintendo Switch Video Game Console Vulnerable to WebKit Exploit: https://t.co/S6oZWa3TY9 @DMBisson #security

[Binni Shah @binitamshah]

Analysis of Stealthy Stegano exploit kit hiding in pixels of malicious ads : https://t.co/oico7cYzoR

[J @Morpheus______]

#MacOS/#iOS Process Explorer - updated for 10.x/12.x w integrated stackshot, stability fixes. And, as always - free: https://t.co/0whdjNkYkP

[key two @key2fr]

Apple's new storage technology finally reversed! https://t.co/jEaRFfuHiX

[Joe Grand @joegrand]

#JTAGulator firmware v1.4 has arrived! Lots of additions, still more things I plan to do. https://t.co/XZ7fImfSPo

[Sarah Edwards 👩🏻‍💻🐈‍⬛ @iamevltwin]

Overview of past Apple FSs w/a preview of the APFS by @rtrouton Preso: https://t.co/fGyjCrjDsv Video: https://t.co/8YCnAGrFDl #DFIR #mac4n6

[hasherezade @hasherezade]

Victims of !XPTLOCK5.0 - please do not pay the ransom! I've got the key, help coming soon (at least for some of you) //#ransomware

[Min(Spark) Zheng @SparkZheng]

Local privilege escalation for OS X 10.11.6 via PEGASUS Write up: https://t.co/hz7jVTyJXg
Exp: https://t.co/y7eCNtBEw3 @qwertyoruiopz

[n0fate @n0fate]

lol https://t.co/HEkmXIvJS0

[Patrick Wardle @patrickwardle]

looks like the OSX/Komplex malware authors didn't test on a non-developer box? #malwareFail

[JK Kim @pr0neer]

Recovering previous/old passwords using NirSoft password recovery tools and shadow copies of Windows, https://t.co/GTISCTLqXE

[Morgan Marquis-Boire @headhntr]

#ProjectSauron infected more than 30 organizations in Russia, Iran and Rwanda https://t.co/xmrbDNT0j5 (full report)

[Max Bazaliy @mbazaliy]

Slides for ‘A Journey Through Exploit Mitigation Techniques on iOS’ - https://t.co/MjatuivznZ #defcon #defcon2016

[ohjeongwook @ohjeongwook]

Latest PPT for the art of reverse engineering Flash exploits - https://t.co/BCJ20MlkRn

Full Paper: https://t.co/KogXNzEa8T

[Sarah Edwards 👩🏻‍💻🐈‍⬛ @iamevltwin]

New Script! - MacMRU (Most Recently Used) Plist Parser https://t.co/M2yv7ipB7k #DFIR #mac4n6

[Binni Shah @binitamshah]

dynStruct : Reverse engineering tool for structure recovering and memory usage analysis : https://t.co/NTmR6fMWN0