Hardly Adequate

Welcome to Hardly a Week 40, the short-form podcast giving you what you need in under 10 minutes. Today is Monday, October 2nd, 2023.

This week's podcast is bought to you by Wise. If you travel overseas for work or have the need for an overseas bank account then Wise could work for you. I particularly like the physical travel Visa for when I'm overseas.

Wise affiliate link - https://wise.com/invite/dic/alexd2041

Jake Williams Post - https://infosec.exchange/@malwarejake/110572102528914893

Timeline Creation for Forensics Analysis - https://infosecwriteups.com/timeline-creation-for-forensics-analysis-2fed1c7508ef

Chinese State-Sponsored Cyber Espionage Activity Targeting Semiconductor Industry in East Asia - https://blog.eclecticiq.com/chinese-state-sponsored-cyber-espionage-activity-targeting-semiconductor-industry-in-east-asia

Mystic Stealer - https://research.openanalysis.net/mystic%20stealer/stealer/obfuscation/cpp/2023/10/01/mystic_stealer.html

NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations - https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-278a

Cipher Challenge Coin - https://shop.hardlyadequate.com

Thanks for listening. As always the best way to support me at the moment is to subscribe to the podcast and like and subscribe to my YouTube channel.

I also have merch, including a challenge coin that has a cipher competition.

All of this and more are linked from my website hardlyadequate.com.

Catch you all next week. 

Hosted on Acast. See acast.com/privacy for more information.

Welcome to Hardly a Week 40, the short-form podcast giving you what you need in under 10 minutes. Today is Monday, October 2nd, 2023.

This week's podcast is bought to you by Wise. If you travel overseas for work or have the need for an overseas bank account then Wise could work for you. I particularly like the physical travel Visa for when I'm overseas.

Wise affiliate link -  https://wise.com/invite/dic/alexd2041

Investigating Android Facebook Messenger - https://forensafe.com/blogs/Android_facebook_messenger.html

From ScreenConnect to Hive Ransomware in 61 hours - https://thedfirreport.com/2023/09/25/from-screenconnect-to-hive-ransomware-in-61-hours/

Is Securing PowerShell a Lost Cause? - https://ransomwaresommelier.com/p/is-securing-powershell-a-lost-cause

Software updates from This Week in 4n6 Week 40 - https://thisweekin4n6.com/2023/10/01/week-40-2023/

Lazarus luring employees with trojanized coding challenges: The case of a Spanish aerospace company - https://www.welivesecurity.com/en/eset-research/lazarus-luring-employees-trojanized-coding-challenges-case-spanish-aerospace-company/

DFSP # 397 – Linux Home Directory Files for DFIR - https://digitalforensicsurvivalpodcast.com/2023/09/26/dfsp-397-linux-home-directory-files-for-dfir/#

BSides Canberra 2023 Schedule - https://cfp.bsidescbr.com.au/bsides-canberra-2023/schedule/#2023-09-30

APT Attack Techniques in Azure Cloud, Lina Lau - https://training.xintra.org/

Case Studies in Point of Sale Hardware Hacking, Zoi Petroulias

‘Hold Your Horses’; Stopping A North Korean Supply Chain Attack Before It Bolts - CG (@int3rrupt)

IoT Malware IRL, David Collett

Cipher Challenge Coin - https://shop.hardlyadequate.com

Thanks for listening. As always the best way to support me at the moment is to subscribe to the podcast and like and subscribe to my YouTube channel.

I also have merch, including a challenge coin that has a cipher competition.

All of this and more are linked from my website hardlyadequate.com.

Catch you all next week. 

Hosted on Acast. See acast.com/privacy for more information.

This week we catch up with Phill Moore. Old collogue from CyberCX and great ally to the cyber community.

Phill's work on This Week in 4n6 is the basis for the Hardly a Week podcast.

Hosted on Acast. See acast.com/privacy for more information.

Welcome to Hardly a Week 39. Today is Monday, September 25th, 2023.

This short-form podcast covers things that I think will interest you. 

A SIEM On the Cheap - Using Sqlite for Data Analysis - https://angry-bender.github.io/blog/SIEM-On-The-Cheap-Using-Sqlite-For-Data-Analysis/

RANSOMWARE GROUPS PIVOTING AWAY FROM ENCRYPTION - https://explore.avertium.com/resource/ransomware-groups-pivoting-away-from-encryption

Malware Persistence Locations: Windows and Linux - https://marcoramilli.com/2023/09/23/malware-persistence-locations-windows-and-linux/

VIDEO: Phishing via Google Docs - https://www.avanan.com/blog/video-phishing-via-google-docs

The hidden side of 24/7/365 – The dreadful APAC shift - https://www.hexacorn.com/blog/2023/09/23/the-hidden-side-of-24-7-365-the-dreadful-apac-shift/

Wireshark Tutorial: Changing Your Column Display - https://unit42.paloaltonetworks.com/unit42-customizing-wireshark-changing-column-display/

ExifTool Version History - https://exiftool.org/history.html#v12.67

Bsides Canberra - https://www.bsidesau.com.au/

Cipher Challenge Coin - https://shop.hardlyadequate.com

Thanks for listening. As always the best way to support me at the moment is to subscribe to the podcast and like and subscribe to my YouTube channel.

I also have merch, including a challenge coin that has a cipher competition.

All of this and more are linked from my website hardlyadequate.com.

Catch you all next week. 

Hosted on Acast. See acast.com/privacy for more information.

Welcome to Hardly a Week 38. Today is Tuesday, September 19th, 2023.

This short-form podcast covers things that I think will interest you. 

Correct the Perspective of a License Plate - https://blog.ampedsoftware.com/2023/09/12/correct-the-perspective-of-a-license-plate

Investigating Android Accounts - https://forensafe.com/blogs/Android_Accounts.html

GOOGLE TAKEOUT FORENSICS: THE ART OF INVESTIGATION [EXPLAINED] - https://www.mailxaminer.com/blog/google-takeout-forensics/

Weaponising VMs to bypass EDR – Akira ransomware - https://cybercx.com.au/blog/akira-ransomware/

Monti Ransomware - https://explore.avertium.com/resource/monti-ransomware

Spidering Through Identity for Profit and Disruption - https://www.huntress.com/blog/spidering-through-identity-for-profit-and-disruption

Installing Sysmon and Elastic Agents (Security Onion) - https://www.youtube.com/watch?v=4AsJ9OhZqR0

DEFCONConference - https://www.youtube.com/@DEFCONConference/playlists

VeloCon 2023 - https://www.youtube.com/watch?v=DjMAri17-MI&list=PLz4xB83Y3VbhJMR6bYKQcRWWbhnac3LjH

Malware Analysis Report: Clop Ransomware — 1 - https://mohitrajai.medium.com/malware-analysis-report-clop-ransomware-1-8fe44b86df67

phrozen - https://www.phrozen.io/

A peek into APT36’s updated arsenal - https://www.zscaler.com/blogs/security-research/peek-apt36-s-updated-arsenal

How to Hire the Right Malware Analyst for Your Team: Our Experience - https://any.run/cybersecurity-blog/how-to-hire-malware-analyst/

New to Cyber: Preston McNair - https://jnl4n6.com/2023/09/13/new-to-cyber-preston-mcnair/

12 eDiscovery Tools for Forensic Solutions in 2023 - https://www.salvationdata.com/knowledge/ediscovery-tools/

Cipher Challenge Coin - https://shop.hardlyadequate.com

Thanks for listening. As always the best way to support me at the moment is to subscribe to the podcast and like and subscribe to my YouTube channel.

I also have merch, including a challenge coin that has a cipher competition.

All of this and more are linked from my website hardlyadequate.com.

Catch you all next week. 

Hosted on Acast. See acast.com/privacy for more information.

Hosted on Acast. See acast.com/privacy for more information.

Welcome to Hardly a Week 36. Today is Monday, September 4th, 2023.

This short-form podcast covers things that I think will interest you. 

FORENSIC ASPECTS OF MICROSOFT REMOTE ACCESS VPN - https://www.synacktiv.com/en/publications/forensic-aspects-of-microsoft-remote-access-vpn.html

Powershell and Obfuscation - https://onlyf8.com//powershell-obfuscationEN

Cryptocurrency Malware: An Ever-Adapting Threat - https://intel471.com/blog/cryptocurrency-malware-an-ever-adapting-threat

CRAFTING EMAILS WITH HTML INJECTION - https://www.trustedsec.com/blog/crafting-emails-with-html-injection/

Tackling Cyber Threats in Healthcare | 2023 SANS Healthcare Forum - https://www.youtube.com/watch?v=6YnCJFsbSmU

Red and Blue Cyber Learning LIVE (Play Along Free!) - https://www.youtube.com/watch?v=e2FREskyZx0

Reverse Engineering: Injection Series Part 4 — Blue Team Labs - https://infosecwriteups.com/reverse-engineering-injection-series-part-4-blue-team-labs-8efe326049dc

4.21.0 Release with Faster Search and Malware Scanning - https://www.autopsy.com/4-21-0-release-with-faster-search-and-malware-scanning/

Cipher Challenge Coin - https://shop.hardlyadequate.com

Thanks for listening. As always the best way to support me at the moment is to subscribe to the podcast and like and subscribe to my YouTube channel.

I also have merch, including a challenge coin that has a cipher competition.

All of this and more are linked from my website hardlyadequate.com.

Catch you all next week. 

Hosted on Acast. See acast.com/privacy for more information.

Hosted on Acast. See acast.com/privacy for more information.

Welcome to Hardly a Week 35. Today is Monday, August 28th 2023.

This short-form podcast covers things that I think will interest you. 

Deep Dive Into Windows Diagnostic Data & Telemetry (EventTranscript.db) - PART 2 - https://stuxnet999.github.io/2023/08/25/Deep-dive-into-windows-diagnostic-data-part-2.html

Volatility3 : Remote analysis on cloud object-storage. - https://www.forensicxlab.com/posts/vols3/

Writing better Yara rules in 2023… - https://www.hexacorn.com/blog/2023/08/26/writing-better-yara-rules-in-2023/

CTI and Its Frameworks: Unpacking the Diamond Model - https://www.bitdefender.com/blog/businessinsights/cti-and-its-frameworks-unpacking-the-diamond-model/

Writing My First Sigma Rule: Container Residence Discovery - https://trustworth.ee/first-sigma-contribution.html

Upcoming Free Webinars - https://www.mobiledit.com/webinars

ECS Forensics and Incident Response - https://cloudyforensics.medium.com/ecs-forensics-and-incident-response-63de9371a9d7

Malware Persistence via Telegram and GitHub - https://sansec.io/research/malware-persistence-via-telegram-and-github

Tuning 365 Defender’s Anti-Malware Controls - https://blog.delivr.to/tuning-365-defenders-anti-malware-controls-868a30346514

CAPA - https://github.com/mandiant/capa

Cipher Challenge Coin - https://shop.hardlyadequate.com

Thanks for listening. As always the best way to support at the moment is to subscribe to the podcast and like and subscribe to my YouTube channel.

I also have merch, including a challenge coin that has a cipher competition.

All of this and more are linked from my website hardlyadequate.com.

Catch you all next week. 

Hosted on Acast. See acast.com/privacy for more information.

The challenge coin remains unsolved, and we get very practical this week.

Living Off the Foreign Land - Part 1/3: Setup Linux VM for SOCKS routing - https://blog.bitsadmin.com/living-off-the-foreign-land-windows-as-offensive-platform

VeloCON 2023: Digging Deeper Together! - https://www.rapid7.com/blog/post/2023/08/17/join-us-for-velocon-2023-digging-deeper-together/

Cellebrite CTF Teaser - https://www.youtube.com/watch?v=trfY1J2Fs6Q

Malware and cryptography 1: encrypt/decrypt payload via RC5. Simple C++ example. - https://cocomelonc.github.io/malware/2023/08/13/malware-cryptography-1.html

Chainsaw forensics tool update - https://github.com/WithSecureLabs/chainsaw

Hosted on Acast. See acast.com/privacy for more information.