Top all-time · #11073
SANS Institute
Company blog · digital-forensics.sans.org/blogsecurity
SANS Institute is the company blog at digital-forensics.sans.org, writing about security. Since 2014, 7 different Hacker News readers have linked it 7 times. No feed was found, so read it on the site itself.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
SANS Institute's digital forensics blog, linked for posts on malicious PDFs, live memory forensics and a code-skills post. Commenters cite these as references rather than evaluating the writing.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Learn about SANS Digital Forensics and Incident Response courses, training and certifications as well as an extensive suite of free Digital Forensics resources.
Most-linked posts?
- /blog/2009/04/24/code-skills-make-better-forensic-analysts2 people · 2 mentions · first linked 2015-12-09
What Hacker News says?
Also relevant: https://www.sans.org/reading-room/whitepapers/malicious/pape... https://digital-forensics.sans.org/media/analyzing-malicious... Malicious PDFs are still around, even today
Comment linking /media/analyzing-malicious-document-files.pdf
on “PDF: Still unfit for human consumption, 20 years later”Submitted TrueCrypt slide removed at request of US Government? [pdf] as a story · 31 points
HN discussion> By back filling history... Yep. That seems plausible. Given means, motive, and opportunity (including a few months of time), could some of the folks here on HN have backfilled history this way? Register an email address one character off of Satoshi's? Edit some old blog posts to insert Bitcoin references? Generate backdated GPG keys? Perhaps enough to satisfy not-very-technical journalists who won't think to compa…
Comment linking /blog/2009/04/24/code-skills-make-better-forensic-analysts
on “Satoshi Nakamoto Is Probably This Unknown Australian Genius?”Submitted Understanding Indirect Blocks in Unix File Systems as a story · 3 points
HN discussion> I wonder if Steven Wright has any open source code that we could review. I've been looking, and so far the only thing I've found is this: https://digital-forensics.sans.org/blog/2009/04/24/code-skil...
Comment linking /blog/2009/04/24/code-skills-make-better-forensic-analysts
on “Satoshi Nakamoto Is Probably This Unknown Australian Genius?”Submitted Identifying and Disrupting Crypto-Ransomware (and Destructive Malware) as a story · 1 points
HN discussionGoogle "live incident response" software. The author works for a security company, they get hired to detect malware and intruders. You can remotely connect to machines and analyze memory, commands, etc. It doesn't matter what TTY it was when you have full system access. http://digital-forensics.sans.org/blog/2011/07/21/live-mem-f... https://code.google.com/p/grr/ https://www.mandiant.com/resources/download/redline
Comment linking /blog/2011/07/21/live-mem-forensic-analysis
on “We may have witnessed a NSA "Shotgiant" TAO-like action”