deft linux - botconf 2020€¦ · malware analysis password recovery network analysis picture...

D EFT Linux WE ARE BACK! www.deftlinux.net

Upload: others

Post on 11-Oct-2020

7 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Page 1: DEFT Linux - Botconf 2020€¦ · Malware Analysis Password Recovery Network Analysis Picture Analysis Mobile Forensics Osint Virtual Forensics OtherTools Reporting O —mer. déc

D EFT LinuxWE ARE BACK!

www.deftlinux.net

Page 2: DEFT Linux - Botconf 2020€¦ · Malware Analysis Password Recovery Network Analysis Picture Analysis Mobile Forensics Osint Virtual Forensics OtherTools Reporting O —mer. déc

$WHOAMI

GIOVANNI 'sug4r' RATTARO

• IT SECURITY CONSULTANT

• Italian board member old <<back|track Linux project

• Staff DEFT Linux

• BLAH BLAH BLAH…

Page 3: DEFT Linux - Botconf 2020€¦ · Malware Analysis Password Recovery Network Analysis Picture Analysis Mobile Forensics Osint Virtual Forensics OtherTools Reporting O —mer. déc

WHAT IS DEFT?

Free DFIR Linux distribution (since 2005)

Digital Evidence & Forensic Toolkit

Live || Install your Forensic LAB!

Searching Between the Lines with DEFT!

DEFT

Zero

DART

DEFT

Next release "DEFT X"

codename: Xplosion

Page 6: DEFT Linux - Botconf 2020€¦ · Malware Analysis Password Recovery Network Analysis Picture Analysis Mobile Forensics Osint Virtual Forensics OtherTools Reporting O —mer. déc

DEFT X

Page 7: DEFT Linux - Botconf 2020€¦ · Malware Analysis Password Recovery Network Analysis Picture Analysis Mobile Forensics Osint Virtual Forensics OtherTools Reporting O —mer. déc

Page 8: DEFT Linux - Botconf 2020€¦ · Malware Analysis Password Recovery Network Analysis Picture Analysis Mobile Forensics Osint Virtual Forensics OtherTools Reporting O —mer. déc

Page 9: DEFT Linux - Botconf 2020€¦ · Malware Analysis Password Recovery Network Analysis Picture Analysis Mobile Forensics Osint Virtual Forensics OtherTools Reporting O —mer. déc

DEFT Zero

Page 10: DEFT Linux - Botconf 2020€¦ · Malware Analysis Password Recovery Network Analysis Picture Analysis Mobile Forensics Osint Virtual Forensics OtherTools Reporting O —mer. déc

Page 11: DEFT Linux - Botconf 2020€¦ · Malware Analysis Password Recovery Network Analysis Picture Analysis Mobile Forensics Osint Virtual Forensics OtherTools Reporting O —mer. déc

DART 2018

Page 12: DEFT Linux - Botconf 2020€¦ · Malware Analysis Password Recovery Network Analysis Picture Analysis Mobile Forensics Osint Virtual Forensics OtherTools Reporting O —mer. déc

www.deftlinux.net

Contacts

@deftlinux

info @ deftlinux.net

www.deftlinux.net

Research , analysis , statistics and forensics : UNODC mission

FEEDBACK ON WINDBG USAGE - Botconf 2017 · Kind of cheat sheet ... TLP: RAINBOW | Feedback on WinDBG usage | Botconf | December 2014 36 . MORE COMMAND Display options

Botconf ppt

FORENSICS ANALYSIS OF OPEN WIFI NETWORK

Memory Forensics - · Memory Forensics An introduction ... Practical Malware Analysis ... Cuckoo Sandbox Yara

Network Forensics Analysis

A Marine Forensics Analysis of the Sinking

COEN 250 Computer Forensics Windows Life Analysis

Chapter 9 Digital Forensics Analysis and Validation Guide to Computer Forensics and Investigations Fifth Edition

Forensics Analysis of an On-line Game over Steam …lightweightcryptography.com/wp-content/papercite-data/...Keywords: Digital forensics, Network Forensics, Windows Forensics, LiveForensics,On-lineGaming

Objective analysis of toolmarks in forensics

Registry Analysis - SANS Computer Forensics

Low Business Interest in Botnet - Botconf

Chapter 9 Computer Forensics Analysis and Validation Guide to Computer Forensics and Investigations Fourth Edition

Physical Memory Forensics - Black Hat · Physical Memory Forensics Mariusz Burdach. Overview •Introduction •Anti-forensics •Acquisition methods •Memory analysis of Windows

Forensics Analysis of Solid State Drive(SSD)

Implementation of Forensic Analysis Procedures for ...Android Forensics, Instant Messenger Forensics, Viber Forensics, WhatsApp Forensics. 1. INTRODUCTION ... communication medium

Network Forensics SOF-ELK and Analysis Poster

Code Cartographer’s Diary - Botconf 2020 · Curated Malware. Collection. Malware Identification. Context & Attribution. Analysis of. Timelines. Code. Relationship. Signatures (YARA)

Normalizing Data for use in Forensics Analysis

Network Forensics: Packet Analysis Using Wireshark

Foundations of digital Forensics 1. 2 Computer Forensics Computer forensics is the scientific examination and analysis of data held on, or retrieved from,

CSN08101 Digital Forensics Lecture 9: Data Analysis

Memory Forensics analysis

ANALISA NETWORK FORENSICS PADA SERANGAN BOTNET€¦ · Botnet’s attack and payload identification according to Network Forensics Analysis. Keywords: Malware, Botnet, Network Forensics

Improving mobile security with forensics, app analysis · PDF fileImproving Mobile Security with forensics, app analysis and big data. ... Author of two mobile forensics + security

A Graph Based Approach Toward Network Forensics Analysis › ~fortega › spring17 › df › research › a4-wang.pdfA Graph Based Approach Towards Network Forensics Analysis · 4:

Botconf 2013 - DNS-based Botnet C2 Server Detection

Investigation of white-collar crime using Mobile Forensics ... · Investigation of white-collar crime using Mobile Forensics Analysis Acquisition Examination Analysis Presentation

Computer Forensics - star.worldbank.org · Computer Forensics ... Forensic image, processing analysis and results ... Why is digital forensics important? Seizing evidence

Formatting for Justice - Botconf 2017 · Formatting for Justice crime doesn’t pay, neither does rich text Anthony Kasza Botconf 2017

Cyber Analysis & Defense (CA&D) - Botconf 2018€¦ · Cyber Analysis & Defense (CA&D) © Cyber Defense Research Group, Fraunhofer FKIE 2 ... Naïve approach (backwards): DNS resolution

Hunting Attacker Activities - Botconf 2021

Nuclear Forensics: Scientific Analysis Supporting Law Enforcement

Memory Forensics Analysis Poster … · Memory Forensics Analysis Poster The Battleground Between Offense and Defense digital-forensics.sans.org Poster_FOR526_v2.2_12-18 Rekall Memory