macOS Memory Acquisition

Posted: Jul 16, 2021 | ~ 1 min read time
#forensics #howto #macOS #memory
How to dump memory from macOS devices using OSXPmem.

macOS VM HowTo

Posted: Jul 12, 2021 | ~ 1 min read time
#howto #macOS #vm
My go-to method for creating a quick and easy virtual macOS machine if you have an Apple host.

HtB: Persistence

Posted: Apr 26, 2021 | ~ 3 mins read time
#ctf #forensics
I recently got access to retired Hack the Box challenges and decided to provide write-ups as well as explanations of the forensics concepts behind the challenge. This is the first post in what will hopefully become a series on DFIR concepts.

Ransomware Thoughts

Posted: Apr 14, 2021 | ~ 4 mins read time
#ransomware
With ransomware being an ever-present threat, I thought I'd jot down some best practices I've come across to prevent and, if the worst should happen, recover from such an attack. This is far from a comprehensive list but can be a jumping-off point when developing a new plan or updating ex...

Shakti CTF 2021 Pillow Challenge WriteUp

Posted: Apr 6, 2021 | ~ 1 min read time
#coding #ctf
This was an awesome beginner CTF that has an accompanying conference called ShaktiCon - a free international conference dedicated to women in cybersecurity. This specific puzzle required some python coding skills.

Shakti CTF 2021 Help Me Challenge WriteUp

Posted: Apr 5, 2021 | ~ 4 mins read time
#coding #ctf #forensics #memory #steganography
This was an awesome beginner CTF that has an accompanying conference called ShaktiCon - a free international conference dedicated to women in cybersecurity. This specific puzzle required knowledge of memory, steganography, and python.

UMass CTF 2021 WriteUp

Posted: Mar 31, 2021 | ~ 1 min read time
#ctf #forensics #memory #steganography
My write up of some of the the UMASS CTF puzzles.

UTCTF 2021 WriteUp

Posted: Mar 17, 2021 | ~ 7 mins read time
#cryptography #ctf #forensics #osint #web
This year, UTCTF hosted a wide range of challenges that included cryptography, forensics, reverse engineering, and web exploits. I focused mainly on forensics and cryptography while dabbling with the web puzzles.

Expand Ubuntu Partition HowTo

Posted: Mar 10, 2021 | ~ 2 mins read time
#howto #lab #vm
I recently made a basic Ubuntu VM with only 20GB of hard disk space and assumed I would only use it for light testing. As time went on, though, I eventually got the point where I wanted to install REMnux and SIFT on that box rather than create a whole new VM and space was becoming an issue.

MetaSpike CTF - (Un)authorized Access & The REST is History

Posted: Feb 24, 2021 | ~ 3 mins read time
#api #ctf #email
Over the last couple months, MetaSpike hosted an email forensics CTF. I wasn't able to get in on it until the very end but I enjoyed the puzzles they presented. It's rare to find CTFs dedicated to a specific area of forensics so I was excited to try out the challenges.