Well we woke up this morning and as is Lisa’s usual routine she pops onto her MySpace. She then turns to me at my desk behind her and asks “What is the Microsoft Malicious Tool? Should I download it?”
I turn and look at her computer and she has what at first glance appears […]

The headline reads, “Oops! Computer tech wipes out info on $38B fund.” Yeah, talk about an oops alright. But then on top of the tech wiping the original and backup drives, the department obviously didn’t have good procedures in place to verify the integrity of their backup tapes since they found them to […]

Saturday morning was my scheduled CISM exam. The night before I had checked what I needed and put everything in the car, ready for the morning. The exam was at 9am, so I got up and ready and was in the car around 8am. I glanced over at my admission form and […]

I read an entry by Ed Skoudis yesterday on the SANS Handler’s diary that was was pretty basic but interesting. He talks about using the built-in Windows tool “netstat” to provide some forensic and diagnostic information for various analysis needs — mainly things like incident handling, vulnerability assessment, malware analysis, etc.

This Saturday I’ll be sitting for the Certified Information Security Manager certification exam. The CISM is recognized world-wide, like the CISSP cert that I hold as well, but it’s much more managerial based then the technical CISSP cert. Also, the CISM is one of just 13 certifications recognized by the U.S. Department of […]

At the organization where I work, my CTO and good friend has been talking about identity theft for literally years in various public and private forums. He’s become quite the expert in defending against identity theft and getting people to understand what to do to protect themselves. Ironically even he, with all his […]