The Mystery of Duqu: Part One
First of all, we feel it necessary to clarify some of the confusion surrounding the files and their names related to this incident. To get a full understanding of the situation you only need to know that we’re talking about just two malicious programs here (at a minimum) – the main module and a keylogger. All that has been mentioned in last 24 hours about connections between Duqu and Stuxnet is re
Stuxnet Malware Analysis Paper
This article will focus on Stuxnet’s windows infection methods and spreading methods. The tricks were used by stuxnet and the evidences behind the criminals of stuxnet. Download the Article in PDF - 2.17 MB Table Of Contents 1. Introduction: 2. Payload: 3. Suspects: 4. Technical Details: 4.1.Stuxnet Live Cycle 4.2. Main Dropper (~WTR4132.TMP) 4.3. Main Stuxnet DLL 4.3.1. Escalating the Privilege
Stuxnet's Footprint in Memory with Volatility 2.0
In this blog post, we'll examine Stuxnet's footprint in memory using Volatility 2.0. A talk was given at Open Memory Forensics Workshop on this topic (see the online Prezi) and the details will be shared here for anyone who missed it. I picked this topic for two reasons. First, Stuxnet modifies an infected system in such ways that are perfect for showing off many of the new capabilities in Volatil
How Digital Detectives Deciphered Stuxnet, the Most Menacing Malware in History
It was January 2010 when investigators with the International Atomic Energy Agency realized something was off at the uranium enrichment plant outside Natanz in central Iran. Months earlier, someone had silently unleashed a sophisticated and destructive digital worm that had been slithering its way through computers in Iran — to sabotage the country’s uranium enrichment program and prevent Presiden
Analyzing a Stuxnet Infection with the Sysinternals Tools, Part 3 - Mark's Blog - Site Home - TechNet Blogs
If you were looking for MSDN or TechNet blogs, please know that MSDN and TechNet blog sites have been retired, and blog content has been migrated and archived here. How to use this site Archived blogs are grouped alphabetically by the initial letter of the blog name. Select the initial letter from the TOC to see the full list of the blogs. You can also type the name of the blog or the title of the
Archived MSDN and TechNet Blogs
If you were looking for MSDN or TechNet blogs, please know that MSDN and TechNet blog sites have been retired, and blog content has been migrated and archived here. How to use this site Archived blogs are grouped alphabetically by the initial letter of the blog name. Select the initial letter from the TOC to see the full list of the blogs. You can also type the name of the blog or the title of the
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Archived MSDN and TechNet Blogs
Internet Security Threat Report (ISTR), Volume 16 | Symantec