Eternal Blues - SMBv1


Newspapers, TV, Radio and Internet have been full of reports about ransomware attacks WannaCry, NotPetya and so on. This short article is not going to repeat those reports but to acknowledge that there is a new FREE tool "Eternal Blues" that helps businesses and consumers to find out, at the push of a button and scan of the network, whether the access point Server Message Block (SMB) version 1 (

Comments

Post a Comment

Popular posts from this blog

Appeal case - Boardman - phone evidence/cell site

The serving of evidence and arbitrarily what should be served or should be not served is highlighted in this Appeal case. It is noted the Appeal Court dealt with issues surrounding making burdensome requests for evidence from the police. I suspect the comments of the Appeal Court could be misconstrued meaning there is a potential for further hearings as to relevance of evidence. The Appeal Court
Read more

HERREVAD Databases Geo Location Artefacts

From a recent discussion regarding HERREVAD Databases it has emerged that they are in fact undocumented Android features for google mobile services (GMS). Any extracted and harvested data from these databases is on the basis "as is" recovered. Oxygen Forensic Detective 911 WiFiHistory.png presents a helpful and useful example of recovered data from HERREVAD: Image courtesy of http://
Read more

MTEB CSA Fundamentals Training

The MTEB has received an increase in the number of enquiries about fundamental (core) training in Cell Site Analysis. It could be useful for readers to be reminded in brief, scoping CSA requires applying a wide-ranging methodology incorporated in the investigation and analysis of mobile device activity and mobile communications. That means a CSA participant needs to understand: - the science
Read more