LoveMyTool - Open Community for Network Management and Monitoring

Open Source Forensics for Windows, MacOS, and Linux (by Casey Mullis)

There are many tools on the market today for conducting computer forensics. Many can cost you several thousand dollars, and then you have to pay a renewal fee to get updates.

I am a firm believer in not re-inventing the wheel.  If there are options out there to get the job done and it is free, then why not use it. The catch to doing computer forensics is the art of collecting information without altering the data. There are tools for this also but we will talk about those later.

 

LMTV | Cyber Crime: What You Don't Know Can Hurt You (by Tim O'Neill)

This Google hangout video was produced by Man'ority Report.

"You can do anything if you put your mind to it." True for a 15-year old immigrant boy who didn't speak English but ended up being an university professor and a successful entrepreneur. That's the American dream. Unfortunately it is also true for a bunch of religious fanatics who hijacked civilian transports and turned them into flying molotov cocktails. That's the American nightmare. It wouldn't take much to start cyber terrorism. Similarly, as parents, our worse nightmare is when we say goodnight to our kids and they go into their private bedrooms and turn on their computers. +Tim O'Neill did a fantastic job today giving us an overview of cyber crime. You can run. You can hide. But what you don't know can and will hurt you.

#Man16 #LMTV +Denny K Miu

DEFT 7.1 Introduction and Videos (by Casey Mullis)

Why do I need a forensically sound  image?        What is a forensic image?

What makes up a forensic image?       How do I make a forensically sound Image?

The questions listed above are four that we are going to answer here today, before we go any further in to DEFT 7.1

What is DEFT 7.1? DEFT is a very professional and stable system that includes excellent hardware detection and the best free and open source applications dedicated to Incident Response, Cyber Intelligence and Computer Forensics. It is one tool in many an investigator should have!

DEFT is meant to be used by:

• Military
• Police
• Investigators
• IT Auditors
• Individuals

And DEFT is 100% made in Italy

DEFT 7 is based on the new Kernel 3 (Linux side) and the DART (Digital Advanced Response Toolkit) with the best freeware Windows Computer Forensic tools. It’s a new concept of Computer Forensic system that use LXDE as desktop environment and WINE for execute Windows tools under Linux and mount manager as tool for device management.

English manual can be downloaded  - http://www.deftlinux.net/doc/EN-deft7.pdf

DEFT 7 Cyber Forensic Tool Overview (by Casey Mullis)

DEFT 7 "REAL" and powerful Cyber Forensic Tool overview!

My name is Casey and I have been learning computers for over 13+ years. My favorite thing to do is to break in to encryption or password protected cyber stuff. I find it funny how insecure and naive we really are in this digital age.

In no means am I saying that I am some great hacker, I just love learning especially to help get criminals. There is so much out on the net to help you do whatever it is you are looking to do. Sometimes you have to spend money to buy tools to get the job done. Sometimes the tool is right in front of your face, if you only opened your eyes. In this case you open Google and do a little searching.

There are many open source tools out there free for use by anyone willing to take the time to find it and research how to use it. What is “Open Source” well the wiki answer is the following:

“In production and development, open source is a philosophy, or pragmatic methodology that promotes free redistribution and access to an end product's design and implementation details [citation needed]. Before the phrase open source became widely adopted, developers and producers used a variety of phrases to describe the concept; open source gained hold with the rise of the Internet, and the attendant need for massive retooling of the computing source code.[citation needed] Opening the source code enabled a self-enhancing diversity of production models, communication paths, and interactive communities.[1] The open-source software movement was born to describe the environment that the new copyright, licensing, domain, and consumer issues created”

Resource: http://en.wikipedia.org/wiki/Open_source

Security Threats Continued: Why They Are Targeting Your Business? (by Jim MacLeod)

Over the last few posts, I’ve dissected the major security threats that are happening on your network today. The first piece dissected the “Who,” mainly how do you classify these perpetrators based on a set characteristics that they share. The next post took a look at the “How” hackers enter your network and what you can do to help safeguard it. For the final piece of this series we will look at the “Why.”

Where is your Attack Level?

While there are lots of sociological theories and studies on why people vandalize and steal, this post will focus the “Why” on the current most common motives that drive hackers to penetrate your network.

1. 1.    “Lulz”
2. 2.    Profit
3. 3.    Ideology

Operation New Son (OpNewSon) – Are you ready??? This could happen to you! (by- Tim O'Neill)

Time to Prepare - Are you ready???

The FBI and international Law Enforcement are warning major companies World Wide of an impending DDOS attack on May 25^th.

Operation New Son  - Tomorrow May 25th, 2012 – Download Operation New Son FBI announcement 

Here is one of the attackers posts of their intention and info - http://pastebin.com/wq6KdgDg

This site also give hints of more info on Twitter, who may block the announcment tweet names –

@AnonymousWiki  - @AnonymouSpoon  - @MehIzDanneh  - @TibitXimer  - @Anonymau

They are asking for your help in attacking their targets.

I propose that it is NOT a good idea to neither support nor cause an attack, as you will be prosecuted!

Do we need a license??? How do we assure safety for our Children in the Wild West of the Internet?(by Tim O’Neill)

I wonder why we need licenses and age limits on everything that we can experience in life, from driving to drinking, except using the Internet?

We protect our Children from driving when they are under 16 and to try to stop them from drinking and smoking before they are old enough to make adult decisions. You cannot start a business without a license or practice medicine and many other adult behaviors!

 There is one major variant to those common rules of access– Having access to the Internet, the 21^st Century Wild West Adult Show.

I am not proposing that we require an age limit, test and license, much less a tax or limits on access to the Internet.
I am curious why parents just give their kids access to a computer and turn them loose in this very adult and proven dangerous environment?

As an ICAC (Internet Crimes against Children), longtime Internet Safety instructor and Cyber investigator and Trainer, I have seen my share of events that have left me to ponder why we seem to put Internet Safety as the last thing we think of, until there is a problem. Don't we lock our doors and cars to keep out strangers and trouble ? Ok why then do we alllow the children open access and they can invite strangers and danger into your locked house??? Then when there is a problem we instantly blame everyone, except ourselves. We call the police then demand and hope for them to solve the issues but as parents we hold the majority of the blame for internet issues because we did not take any time to coach and watch over our kids, but we almost always blame the failure of society, the schools, teachers, police, law makers…etc but not the parents!!!

 Important Rule #1 - No one is responsible for your children and their behavior except you, the parents!

Lawful Interception: What is it and why is it important? (by Jay Botelho)

On the heels of the year’s much discussed email phishing campaigns, cyber attacks, and data breaches came one of the biggest security conferences of 2011: ISS World, Kuala Lumpur. ISS World presents methodologies as well as tools that help bridge the chasm between how intercepted data is lawfully gathered to using this information for actionable intelligence. Attendees of the conference commonly include law enforcement, intelligence and interior security analysts, as well as telecom operators who perform, manage, and address the lawful interception of network data for electronic criminal investigations. Top sessions for 2011’s conference included “Top Ten Internet Challenges Facing Law Enforcement and The Intelligence Community” and “Guru Panel on Best Practices for Deploying Intelligence Probes and DPI for Lawful Interception”.

Aside from its predominance at ISS World, Lawful Interception has been a hot topic since its inception in 1968, back in the Plain Old Telephone Service (POTS) era, with the Omnibus Criminal Control and Safe Streets Act of 1968 (this pertains only to the US). Today, with human rights groups and occasionally governments fearing that the technology used in Lawful Interception has the potential ionto be detrimental to both individuals and countries, i.e. this technology can easily be misused by totalitarian regimes, and for a cyber-arms race, the use of Lawful Interception by law enforcement agencies has been hotly contested.

So, then, what is Lawful Interception?

Key Questions a Cyber Security Solution Must Answer (by Jay Botelho)

Do you feel prepared for a cyber-related attack? Although most IDS/IPS systems do a very good job with the “D” (detection) and “P” (prevention), hackers still make their way in. High profile cases are all over the news, and those are just the ones we hear about.

Once an intrusion does occur, IDS/IPS and other security solutions fail to provide network engineers with the details they need to determine the magnitude of the intrusion and assess the impacts, key steps in reassuring yourself, management, and customers that you know exactly what happened, what was compromised and how it will be prevented in the future. In addition to perimeter-based network security, like IDS/IPS and firewall solutions, network recorders with network forensics capabilities are required. Without them, you are potentially exposing your network, and your company’s reputation, to a great deal of damage.

A Great Week – Computer Cache Training and CacheBack (by The Oldcommguy)

A new and easy way to dig into computer internet caches!

As many of you know I teach Cyber Investigation techniques..etc to Law Enforcement plus private and corporate security officers. Thus getting data out of the Internet cache for all the big browers is not an easy task until I was trained on the new CacheBack solution! Very Cool!

Two weeks ago, I had the pleasure of being trained, tested and certified on a new software tool for security and law enforcement personnel called CacheBack.

CacheBack is the brain child of John Bradley and even though the newest version is not out it is an awesome visualization tool for cached data from websites to chat. It even allows one to play a chat for court room viewing without using the entire product and suspect database.

He seem to have thought of almost everything from simplicity of operation, speed of acquisition, forensically sound processes to easy to develop sound, focused and yet simple reports on a very complex set of data.

CacheBack opens the suspect information in a simple to use tabular view, you select the evidence needed, it automatically carves out your selections then easily place in a report for evidence. The tool even makes use of Microsoft Excel and Access for custom report building or placing the information into larger reports.