Posts on dfir
4 posts on dfir. Notes from public sources and my own test lab.
Drowning in the Sandbox: Seeing the Unseen in Malware Analysis
Modern malware doesn't just dodge signatures anymore—it hides from the analysis environment itself. Let’s dive into how these "smart" samples detect your VM and what we can do to stay ahead.
The End of Signature-Based Security: A Journey to the Heart of a File and the Art of Analysis
A deep dive into malware analysis from a Red Teamer's perspective, exploring why static and dynamic analysis are crucial for building robust defensive strategies in today's threat landscape.
Who’s in the Sandbox? The Labyrinths of Malware Analysis and the Eternal Game of Cat and Mouse
Signature-based detection is a relic of the past. Today's malware is context-aware and built to evade analysis. Let's dive into how we dissect these sneaky payloads without losing our minds.
Think That File Is Gone? The Silent Scream of Digital Traces
A deep dive into the world of digital forensics, why you shouldn't just pull the plug on a compromised system, and how to catch an attacker's 'whispers' using Volatility.