Category: SANS Internet Storm Center, InfoCON: green

Security related Docker containers, (Wed, Oct 2nd)

Over the last 9 months or so, I've been putting together some docker containers that I find useful in my day-to-day malware analysis and forensicating. I have been putting them up on hub.docker.com and decided, I might as well let…

Tool update: mac-robber.py and le-hex-to-ip.py, (Mon, Sep 30th)

One of the problems I've had since I originally wrote mac-robber.py [1][2][3] seven years ago is that because of the underlying os.stat python library we couldn't get file creation times (B-times). Since the release of GNU coreutils 8.32 (or so),…