/images/logo.jpg

aoiflux

Genie - Spawn Your Code

Was going through my github profile and that’s when I noticed one of my older #projects. Here’s to #nostalgia :) Do you like creating webapplications in go but hate writing all the boilerplate code with logging, database setup, and routes? Check out genie! It’s a web application code generator that creates a skeleton webapp project for you. Complete with database connectivity, logging, basic security, and route registrations for #crud opreations.

NTFS is a Transactional File System

What does it mean? It means every I/O operation is a transaction. And these transactions are performed atomically. Either they succeed or they fail. There are no half/partial writes (in theory). Do you feel ntfs is reliable? Or do you prefer something more proven in the #raid world such as zfs? Higher reliability of filesystems means higher probability of recovering deleted files during an investigation. Bonus This doesn’t mean you can’t find ways to subvert it.

DataWiping = 🩸 Cleaning

Data Wiping is the new Blood Cleaning Threat actors come in all shapes and sizes, they could be script kiddies trying to run the latest tool for funzies or they could be experienced criminal actors. Either way, they try to hide their activities by wiping data from their computers once the deed is done One might think using sophisticated tools to shred files and even format the hard-drives may be enough to cover their tracks but that’s not the case every time.

DFIR Triage - New Horizons

Digital forensics triage analysis is no longer just about pattern matching strings or looking for NSRL hits. Triage has pivoted to include face detection, age estimation, perceptual hash matches to detect slightly modified contraband files and it’s just the tip of the ice berg.