Using Volatility for advanced memory forensics
Oct 24, 2024 · TL;DR Memory forensics enhances investigations by analysing volatile data (in RAM) unavailable in disk forensics. Key insights from memory include running processes, network connections, encryption keys, and user activity, vital for real-time investigations. Smaller memory images (4-32 GB) offer faster analysis compared to large disk images (250+ GB).
Bloodhound walkthrough. A Tool for Many Tradecrafts
Jun 7, 2019 · Running those commands should start the console interface and allow you to change the default password similar to the Linux stage above. In conjunction with neo4j, the BloodHound client can also be either run from a pre-compiled …
Mounting memory with MemProcFS for advanced memory forensics
Oct 31, 2024 · Mounting memory? This changes everything! TL;DR Memory forensics is crucial for investigations, providing access to volatile data, like running processes and network connections. MemProcFS is a game-changer tool in memory forensics, allowing memory dumps to be mounted and browsed like file systems, simplifying …
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)
Jul 2, 2024 · TL;DR The Qualys Threat Research Unit has found a high-severity vulnerability, filed under CVE-2024-6387, affects OpenSSH (Open Secure Shell), a networking utility often used for remote server management and secure communication over insecure networks. CVE-2024-6387 affects the OpenSSH server on glibc-based Linux systems. Versions before 4.4p1 and versions 8.5p1 to but not including 9.8p are
How we helped expose a £12 million rental scam
TL;DR We helped Channel 4 with trying to track down rental scammers. We are not the police so we could only take it so far and any proving guilt or innocence would be a police matter. We saw organised approaches and elaborate setups. A lot of technical and money laundering techniques were needed. The person
What goes into testing a ship? - Pen Test Partners
Nov 5, 2024 · TL;DR Testing a ship involves identifying and mitigating cybersecurity risks using the "Identify, Prevent, Detect, Respond, Recover" framework. Guidelines include MSC.428(98), BIMCO, IACS UR E26/E27, and ISO standards. New builds and existing vessels require proper documentation and network security measures. Key focus areas include corporate IT systems, OT security, network segmentation ...
Cyber Security Consulting & Testing | Pen Test Partners
Dec 11, 2024 · What we provide. Responsiveness – We are recognised as being extremely responsive.We can begin an engagement with as little as 24 hours’ notice. Follow-up – One of the reasons we have such loyal clients is the availability our consultants have for follow-up work.Ongoing guidance – Once an engagement is over…It’s never truly over, there will always be questions, queries, and advice ...
Advice for manufacturers on the coming PSTI regulation
Feb 23, 2024 · TL;DR PSTI: The UK Product Security and Telecommunications Infrastructure (Product Security) Act Regulations effective from 29 April 2024 Assess how, where, why, and when you may be affected Review supply chain and in-house teams for compliance readiness Specific obligations for manufacturers, importers, and distributors Use the PSTI Act and its regulations as your compliance blueprint
BSides Bristol - Pen Test Partners
Aug 31, 2024 · Get in touch. UK Office: Pen Test Partners LLP Unit 2, Verney Junction Business Park Buckingham MK18 2LB United Kingdom +44 20 3095 0500 Contact Us »
Intercepting MFA. Phishing and Adversary in The Middle attacks
Dec 12, 2023 · 3 of my last 5 business email compromise investigations have involved an Adversary in The Middle (AiTM) attack. Even the more security-aware people with bolstered Microsoft 365 (M365) configurations are coming up blank as to how their comprehensive MFA policies have been bypassed. It’s a technique we have been using in …