Battles With Boredom

I’m a GCFE! (GIAC Certified Forensic Examiner)

Today I passed the GCFE exam, making me GIAC Certified Forensic Examiner number 490. From the GIAC website,

The GCFE certification is for professionals working or interested in the information security, legal and law enforcement industries with a need to understand computer forensic analysis. The certification focuses on core skills required to collect and analyze data from Windows computer systems.

The GCFE certifies that candidates have the knowledge, skills, and ability to conduct typical incident investigations including e-Discovery, forensic analysis and reporting, evidence acquisition, browser forensics and tracing user and application activities on Windows systems.

Rock on! Oddly enough, as I was walking out the door to take the exam, we got a support request from a client who just located a stolen laptop and needs us to do some forensics on it to find out where it’s been. Great timing.

Happy Data Privacy Day!

Today is Data Privacy Day! I decided it would be appropriate to pick on one of the biggest offenders of crimes against your privacy – Facebook. Continue reading Happy Data Privacy Day!…

GraphJam Vulnerable to Some Kinda Injection (NOT)

A friend of mine’s daughter was surfing around GraphJam.com this evening when her computer popped up a warning, saying it had a virus on it! A very authentic-looking Windows Security Alert popped up, telling her that her system was infected with malware. Continue reading GraphJam Vulnerable to Some Kinda Injection (NOT)…

Security Tip: Don’t Click on Links, and Don’t Send Them Either!

By now, many of this blog’s readers have already heard me tell them why it is bad to click on links in email. Without going in to detail, it is because links can very easily be forged in email, just like they can on a web site.

Here’s an example: Where do you think this link will take you? Go ahead and try, it’s safe (I promise).

https://www.paypal.com

Continue reading Security Tip: Don’t Click on Links, and Don’t Send Them Either!…

Social Engineering Win, Hotel Security FAIL

This weekend I checked out of the hotel I stayed at in Boston. Thinking I wasn’t going back to my room, I left my keys and other miscellaneous (non-personally-identifiable) paperwork in the room. Among said paperwork were a few complimentary drink coupons, which I realized I could use for coffee at breakfast. Continue reading Social Engineering Win, Hotel Security FAIL…