Monday, August 3, 2020

My First SANS DFIR Summit Experience


This would have been the first year I would have made the trip down to Austin, Texas for the SANS DFIR Summit, but the pandemic really screwed that one up (hopefully next year). Despite the conference going virtual, it went off without too many hitches. There were so many incredible talks from Ryan Benson's on Unfurl, to David Cowen and Matt Seyer's on real time USN/log analysis, to Sarah and Andrew Konunchuk repping Bloomsburg University to fullest in their eDiscover/DFIR discussion. I know I'm leaving out so many others but they were all really incredible. The recordings will eventually be on the SANS YouTube page for those who missed out.

Monday, June 8, 2020

Magnet Virtual Summit 2020 CTF (Windows)

Previous: Egg Hunt | iOS | Memory | Android


The last part of Magnet Virtual Summit CTF once again proved that not everything can be automatically parsed by the tools, you have to dive into the artifacts a bit to pull out the proper answers.

Friday, June 5, 2020

Magnet Virtual Summit 2020 CTF (Android)

Previous: Egg Hunt | iOS | Memory


The Android image had some of the toughest questions yet in this CTF. This section gave me fits while playing live but giving it more time to digest and think it through, came out with almost all the answers.

Thursday, June 4, 2020

Magnet Virtual Summit 2020 CTF (Memory)


Previous: Egg Hunt | iOS
These questions were fairly straightforward if you know how to use Volatility but was a good refresher for me.

Wednesday, June 3, 2020

Magnet Virtual Summit 2020 CTF (iOS)

Previous: Egg Hunt

If anything the iOS section of the Magnet CTF proved to me, you really need to deep dive into the database files to pull out all the information. I think it was fantastic how they made you go outside the box to find flags in this section.