A Day in the Life of an Information Security Investigator

Recent blog entries by Chief Monkey

Articles

Videos: BSides Columbus Ohio, USA 2015

Jan 30, 2015 | Comments (0)

Irongeek over at irongeek.com has posted all of the videos from BSides Columbus 2015. What is BSides? Each BSides is a community-driven ...

Cool Tools: Shadow Daemon 1.0 WAF

Jan 30, 2015 | Comments (0)

I'm constantly sharing cool tools that I find and use for both offensive and defensive purposes. I'm currently in the market for a web application ...

Advice to Students Curious About Entering Forensics Field

Jan 17, 2015 | Comments (6)

I responded to a Redditor in /r/computerforensics who posed the following question: Hi /r/computerforensics, I'm a junior in HS interested in this ...

Security Cheat Sheet Extravaganza

Dec 31, 2014 | Comments (0)

As I've gotten older, I've realized that I just can't remember every single command, flag and option for many of the tools that I use. It's gotten worse ...

2015 Predictions for InfoSec

Dec 31, 2014 | Comments (0)

I came across this article at NetworkWorld by Jon Oltstik that mirrors some things that I’ve been thinking about for 2015. In the article, Jon addresses a ...

Keurig 2.0: Hacked: Documented DRM Bypass!

Dec 10, 2014 | Comments (0)

It's been well documented in all of my case files that I love coffee. I practically live off of the stuff, intertwined with occassional cups of green tea.

LinuxChiro: The New Tool on the Block for STIG Auditing and Remediation

Nov 30, 2014 | Comments (0)

I’m always thrilled to see to see folks taking the initiative to create new tools that can be used by the community to secure systems, and even meet ...

BSides Winnipeg Videos are Up

Nov 30, 2014 | Comments (0)

Well, it’s taken a while, but the videos from BSides in Winnipeg last year (2013) are finally up and available for viewing. A BSides conference is an ...

Good PenTest Report Writing

Nov 28, 2014 | Comments (0)

I got a ping from a reader who apparently is a big fan of a previous article I wrote on bad penetration testing (the famous Scumbag Penetration Report) and shot ...

Bypassing E-mail A/V is Ridiculously Easy

Oct 31, 2014 | Comments (3)

Ever wonder how malware-ridden attachments are escaping popular e-mail security scanners and landing in your inbox? Frustrating, isn't it? I have a ...

Facebook Embraces Tor to Increase Security

Oct 31, 2014 | Comments (0)

Today Facebook announced that they will provide secure access to Facebook over Tor. What is interesting about this announcement isn't really the ...

Recovering Data from FAT Filesystems using TestDisk on Linux

Oct 26, 2014 | Comments (2)

This seems to be a pretty popular topic lately, and a recent ping from a good friend on IRC got me thinking that perhaps a blog post was ...

Creating a Modern Security Engineering Organization

Oct 1, 2014 | Comments (0)

I happened upon this talk by Zane Lackey on building a modern security engineering organization, and it's a great message to share with your security team - and ...

BlackHat and DerbyCon 2014 Videos are Available!

Oct 1, 2014 | Comments (0)

I spend a great deal of time on the road, and part of that time is attending as many security conferences as possible to keep up to date, build social circles, ...

Dyre Malware Reinforces Need for Strong Endpoint Security

Oct 1, 2014 | Comments (0)

If you've been waiting around for an excuse to push Binary Execution Prevention solutions into your enterprise desktop security stack, wait no longer. As ...

Shakacon: Open Source Threat Intelligence [VIDEO]

Aug 31, 2014 | Comments (0)

If there's one security conference in the USA that I wish I'd get to, it's Shakacon, held in the state of Hawaii. :) One ...

Scumblr and Sketchy: Gathering Threat Intel on a Budget!

Aug 31, 2014 | Comments (0)

One can never have enough good threat intelligence about potential threats to one's organization and assets. Just as nations spend millions of dollars on ...

Latest "CelebGate" Photo Leak is New News of an Old Problem

Aug 31, 2014 | Comments (4)

Tabloid magazines, TV shows and web sites make millions every year off of celebrity "oops" pictures that involve everything from a wardrobe malfunction, ...

Blackhat 2014 & Def Con 22 Cheat Sheets!

Jul 28, 2014 | Comments (0)

For those of you going to BlackHat USA 2014 in Las Vegas on Aug 5th, be sure to download the cheat sheet! Click below for a breakdown of speakers, bios, ...

Blackhat & DefCon Tips: 2014 Edition

Jul 28, 2014 | Comments (0)

[Edited for 2014] It's that time of year folks! BlackHat and DefCon kick into high gear next week! Mandalay Bay is hosting BlackHat 2014, and DefCon ...