Reverse Engineering

This is a local mirror of a blog written by me and originally published by NCC Group.

This is a local mirror of a blog written by me and originally published by NCC Group. Note: there are now better ways of wiping modern SSDs, as many will be self encrypting or support ATA commands for secure erase.

This is a local mirror of a blog written by me and originally published by NCC Group. This project was a highlight of my time at NCC Group, and I enjoyed collaborating with Pete Beck during analysis.

This presentation was given at 44CON 2014. It provides an introduction to automated extraction of useful indicators of compromise …

This is a local mirror of a blog written by me and originally published by NCC Group. Background In March Microsoft published security advisory 2953095, detailing a remote code execution vulnerability in multiple versions of Microsoft Office (CVE-2014-1761).