Overblog Tous les blogs Top blogs Technologie & Science Tous les blogs Technologie & Science
Suivre ce blog Administration + Créer mon blog
MENU

Web blog d'un ingénieur en sécurité informatique. IT Security watcher's blog: news, threats analysis, AV issues, PoC, IT security, bugs... Contact: philippe.vialle@wanadoo.fr

Publicité

Tomtom GPS forensic analysis hints

Tomtom GPS forensic analysis hints

This article will aim to help a little bit the guys who try to understand/find tracks on a Tomtom GPS. The model being investigated is a Tomtom Rider 2, 2010. First of all, extract the SD Card, and then plug it to a safe/secured computer. At the root...

Lire la suite
Publicité

using ProcMon may lead to a denial of service condition

using ProcMon may lead to a denial of service condition

I felt that Kaspersky antivirus was taking a lot or resources, generating lots of HDD requests. So I tried to monitor what was going on, and used SysInternals Procmon. BTW, hi and congrats Mark :) I set up a filter targeting avp.exe (one of the main exefiles...

Lire la suite

Hameçonnage Orange (fausse facture), 6 jours après...

Hameçonnage Orange (fausse facture), 6 jours après...

Cette fois-ci, j'ai préféré ne pas évaluer l'efficience de solutions de sécurité à l'instant T où la menace atteignait le poste, mais quelques temps après... Voici le courriel , assez bien fait d'ailleurs : Thunderbird 64 (Miramar) avait alerté sur un...

Lire la suite

Fake twitter profile, leading to porno-dating website?

Fake twitter profile, leading to porno-dating website?

While surfing on Twitter you may find such a profile... that may look interesting for a few guys :) As you can see, several posts dealing with men/women... and "being single"... But what I find more interesting is the link, that is quite visible, just...

Lire la suite
Publicité

Faux message Facebook, menant à site porno/rencontre !

Faux message Facebook, menant à site porno/rencontre !

Je m'attendais à tout autre chose en lisant le sujet du courriel... Subject: La photo de votre profil est belle From: "Lacie Peterson" Le corps du courriel est simple, sans faute, plutôt convaincant : Une fois que l'on clique...

Lire la suite

MS official Uptime tool: a Windows Defender false positive...

MS official Uptime tool: a Windows Defender false positive...

While trying o get the official "uptime" tool from MS's website (http://support.microsoft.com/kb/232243 ) I had a surprise. The file got detected by the automatic AV scan which is shipped with IE9 (ie: Windows Defender). And the VirusTotal's results are...

Lire la suite