Breach response planning, set to music!
It’s the graveyard shift at the SOC. Ana and Elsa are on duty, when suddenly it becomes clear that Bad Things are afoot. The nightmare scenario has come about – the Evil ...
HackFu 2015 – The Badgening
Flashback to August 2014. Planning for HackFu 2015 is well underway: Alec: Hmm, maybe HackFu could use a bit of DefCon-style badge hacking..? Martyn (MWR): Can we do something cool for £10-£20 per badge? ...
Who are you?
Unwanted email is as near a certainty in life as death and taxes. “Selling” spam is a nuisance; phishing emails or messages bearing hostile attachments have the potential to really ruin your day ...
The MKII Robot Controller
I thought I’d briefly share the latest gadget I’ve been tinkering with. You may remember the robot I built for HackFu – I always thought I could do better with the packaging ...
I love it when a plan comes together
As defenders, we have many reasons to do our jobs. We want to comply with regulations, protect our employers (and protect our pay cheques!), and just maybe we enjoy the challenge despite ...
When Worlds Collide
ELSA is a powerful component of SecurityOnion; one can waste productively use many hours drilling through your logs. The more parsers and dashboards you write for your own specific log sources the more ...
HackFu 2013 challenge teardown – Part Two
Part One of this post is here; this time I’m going to talk about TempEx and its controller: Parts list From the point of view of the challenge, TempEx is mostly chrome, ...
HackFu 2013 challenge teardown – Part One
Words have not yet been invented to describe the utter awesomeness of HackFu. Run by MWR Infosecurity, it’s two extremely intense days of team-based hacking, puzzling and pwning, tackled by means of ...
The Adventures of Packet Tracy, PI – The Case of the Disappearing Delicacy
Welcome to my latest challenge, part of the run-up to BSides London 2013. It’s a bit different this time, both in terms of what you have to do and what you get if ...
Virtual Private Onions
If you’ve not checked out Security Onion (SO) yet, you really should. It’s a powerhouse Linux distro, running everything an analyst could need to carry out effective Network Security Monitoring (NSM). The latest ...
