Comments for Sharpe Security Blog http://blog.sharpesecurity.com Malware RE, Vulnerability Management, Incident Response, Software Development, Software Packaging Mon, 19 Sep 2011 00:33:40 +0000 hourly 1 http://wordpress.org/?v=3.3.1 Comment on Volatility Framework 2.0 Released by David Sharpe http://blog.sharpesecurity.com/2011/08/06/volatility-framework-2-0-released/#comment-547 David Sharpe Mon, 19 Sep 2011 00:33:40 +0000 http://blog.sharpesecurity.com/?p=1121#comment-547 Volatility can't, but I hear Voltage (used within Terremark) from the same original Volatility developer can. Volatility can’t, but I hear Voltage (used within Terremark) from the same original Volatility developer can.

]]> Comment on Volatility Framework 2.0 Released by B http://blog.sharpesecurity.com/2011/08/06/volatility-framework-2-0-released/#comment-546 B Sun, 18 Sep 2011 16:26:33 +0000 http://blog.sharpesecurity.com/?p=1121#comment-546 Can volatility perform analysis of a live system without doing a complete memory dump first? If you're going to use it in the enterprise to look for indicators of compromise, I think it would be useful to be able to sample live memory instead of trying to manage 2gb+ dumps from hundreds or thousands of systems. Can volatility perform analysis of a live system without doing a complete memory dump first? If you’re going to use it in the enterprise to look for indicators of compromise, I think it would be useful to be able to sample live memory instead of trying to manage 2gb+ dumps from hundreds or thousands of systems.

]]> Comment on Mozilla Firefox 6.0 and 3.6.20 Released by Francois http://blog.sharpesecurity.com/2011/08/17/mozilla-firefox-6-0-and-3-6-20-released/#comment-531 Francois Wed, 17 Aug 2011 16:23:10 +0000 http://blog.sharpesecurity.com/?p=1129#comment-531 I wish they would stop breaking addons between their releases. Because of that, I know not everyone will upgrade regardless of the fact that this is also a security fix. I wish they would stop breaking addons between their releases. Because of that, I know not everyone will upgrade regardless of the fact that this is also a security fix.

]]> Comment on Volatility Framework 2.0 Released by Me http://blog.sharpesecurity.com/2011/08/06/volatility-framework-2-0-released/#comment-530 Me Mon, 15 Aug 2011 22:46:53 +0000 http://blog.sharpesecurity.com/?p=1121#comment-530 Digital DNA is what makes it slick. I'm less of a fan of RP than I am of Active Defense. Try running Violatility on 100s of systems at once... Digital DNA is what makes it slick. I’m less of a fan of RP than I am of Active Defense. Try running Violatility on 100s of systems at once…

]]> Comment on Oracle July 2011 Patches Released by sai krishna http://blog.sharpesecurity.com/2011/07/20/oracle-july-2011-patches-released/#comment-525 sai krishna Thu, 11 Aug 2011 12:18:28 +0000 http://blog.sharpesecurity.com/?p=1105#comment-525 If u provide patch id and number i will be very grateful to u If u provide patch id and number i will be very grateful to u

]]> Comment on Oracle July 2011 Patches Released by sai krishna http://blog.sharpesecurity.com/2011/07/20/oracle-july-2011-patches-released/#comment-524 sai krishna Thu, 11 Aug 2011 12:16:50 +0000 http://blog.sharpesecurity.com/?p=1105#comment-524 what's the patch numbers released in the month of july and april what’s the patch numbers released in the month of july and april

]]> Comment on Volatility Framework 2.0 Released by Greg Hoglund http://blog.sharpesecurity.com/2011/08/06/volatility-framework-2-0-released/#comment-521 Greg Hoglund Mon, 08 Aug 2011 18:51:58 +0000 http://blog.sharpesecurity.com/?p=1121#comment-521 David, Devastating blow? You may not know that HBGary released a <a href="http://www.hbgary.com/hbgary-releases-responder-ce" rel="nofollow">free version of Responder</a> at the CEIC conference earlier this year. We support the community and have made the CE version available for training as well. You should also know that the free version of Responder supports: 32bit Windows ALL VERSIONS, ALL SERVICE PACKS (excluding NT4.0) 64bit Windows ALL VERSIONS, ALL SERVICE PACKS Responder CE also supports scripting and comes with the source code to a command-line version that you can customize at will. I hope this helps. -Greg Hoglund www.hbgary.com David,

Devastating blow? You may not know that HBGary released a free version of Responder at the CEIC conference earlier this year. We support the community and have made the CE version available for training as well. You should also know that the free version of Responder supports:

32bit Windows ALL VERSIONS, ALL SERVICE PACKS (excluding NT4.0)
64bit Windows ALL VERSIONS, ALL SERVICE PACKS

Responder CE also supports scripting and comes with the source code to a command-line version that you can customize at will. I hope this helps.

-Greg Hoglund
http://www.hbgary.com

]]> Comment on Volatility Framework 2.0 Released by Tim S http://blog.sharpesecurity.com/2011/08/06/volatility-framework-2-0-released/#comment-519 Tim S Sat, 06 Aug 2011 10:06:27 +0000 http://blog.sharpesecurity.com/?p=1121#comment-519 While I've historically been a huge fan of Volatility & Mandiants free tools, I just cant help but point out the elephant in the room. Where is the 64-bit support? All the large hardware manufacturers don't even sell 32-bit hardware anymore and virtually all new machines have been shipping with 64-bit operating systems since last year. Am I missing something? While I’ve historically been a huge fan of Volatility & Mandiants free tools, I just cant help but point out the elephant in the room. Where is the 64-bit support? All the large hardware manufacturers don’t even sell 32-bit hardware anymore and virtually all new machines have been shipping with 64-bit operating systems since last year.

Am I missing something?

]]> Comment on Volatility Framework 2.0 Released by Anonymous http://blog.sharpesecurity.com/2011/08/06/volatility-framework-2-0-released/#comment-517 Anonymous Sat, 06 Aug 2011 05:00:19 +0000 http://blog.sharpesecurity.com/?p=1121#comment-517 True. How can you justify 60,000 for a corvette when you can build a boxcar out of plywood in your garage for free? Same basic idea. True. How can you justify 60,000 for a corvette when you can build a boxcar out of plywood in your garage for free?

Same basic idea.

]]> Comment on Scant Facts Regarding Lockheed’s VPN System Takedown by dio http://blog.sharpesecurity.com/2011/05/28/scant-facts-regarding-lockheeds-vpn-system-takedown/#comment-401 dio Mon, 30 May 2011 05:10:30 +0000 http://blog.sharpesecurity.com/?p=1005#comment-401 uhhhhhm The smart card has been cracked, Mr. Brilliant. Reference Mandiant's M-Trends 2011 issue and note the smart-card proxy capabilities our adversaries have implemented with wide ranging success. That was the first pillar. When organizations started using RSA in response to threats, they took down that pillar of defense as well. Wake up. Until the actors are made to suffer retributive and punitive punishing attacks for their efforts, nothing will change. uhhhhhm The smart card has been cracked, Mr. Brilliant. Reference Mandiant’s M-Trends 2011 issue and note the smart-card proxy capabilities our adversaries have implemented with wide ranging success. That was the first pillar. When organizations started using RSA in response to threats, they took down that pillar of defense as well. Wake up. Until the actors are made to suffer retributive and punitive punishing attacks for their efforts, nothing will change.

]]>