Week 38 – 2016

SOFTWARE UPDATES Plaso has been updated to version 1.5, codenamed Gná. This version has back-end performance updates and new and improved plugins, as well as support for YARA rules. It’s important to note that because of the backend updates, this version isn’t compatible with storage files generated by older versions. (As a side note, a […]

Week 37 – 2016

Back in Sydney again! Unfortunately, I ran out of time this week (jet lag doesn’t help productivity) so some of the summaries may be a bit sparse (you may be able to tell which ones I did when I had more time, maybe not). SOFTWARE UPDATES Sumuri released Paladin version 7. The update adds support […]

Week 36 – 2016

Last week of vacation, this time, I’m writing overlooking Bangkok! Also, less than 2000 words! closest thing I get to a slow news week 🙂 SOFTWARE UPDATES Willi Ballenthin updated his Windows Event Log parser, python-evtx, to version 0.5.0. The update adds py3 support. Check out @williballenthin’s Tweet Microsystemation updated XRY to version 7.1; adding […]

Week 35 – 2016

This week’s post comes courtesy of the free WIFI on the train to Amsterdam. Also, a very extravagantly bearded train ticket inspector saw me watching the Forensic Lunch and stopped to tell me that he thought Matthew has a nice beard. SOFTWARE UPDATES Didier Stevens updated his Python script rtfdump to version 0.0.4 to improve dealing with […]