SANS Digital Forensics and Incident Response Blog: Daily Archives: Mar 09, 2012

Digital Forensics Case Leads: Arrests galore between Hackers and "Operation Nanny", Updated tools and more.

This week in Case Leads numerous hackers were arrested as well as a online pedophile ring was disbanded. One new tool for flash analysis is out as well as updates to existing tools. A case study as well as working with the SIFT workstation and a quiz to solve using proper pirate Arrgot round everything … Continue reading Digital Forensics Case Leads: Arrests galore between Hackers and "Operation Nanny", Updated tools and more.


Free 3rd Gen iPad with SANS vLive courses - through March 21!

Through March 21, 2012 you will receive a Free 3rd Gen iPad with any vLive course. To get your Free 3rd Gen iPad: Register for a vLive course. Enter color specific promo code 0308_iPadBLK or 0308_iPadWHT when you check out. Please allow 4 weeks for delivery of your iPad. This offer is only available in … Continue reading Free 3rd Gen iPad with SANS vLive courses - through March 21!


Protecting Privileged Domain Accounts: Disabling Encrypted Passwords

[Author's Note: This is the 3rd in a multi-part series on the topic of "Protecting Privileged Domain Accounts". My primary goal is to help incident responders protect their privileged accounts when interacting with comprised hosts, though I also believe this information will be useful to anyone administering and defending a Windows environment.] Update: I have … Continue reading Protecting Privileged Domain Accounts: Disabling Encrypted Passwords