In this episode of SecuraTip, we demo the use of tekCollect. tekCollect is a python tool written by @TekDefense, which is useful for scraping data (IP addresses, MD5 hashes, SSNs, Emails, etc) from URLs and files. This episode highlights several use cases for the tool, while also exploring advanced features such as custom regex scrapes. To download tekCollect goto: http://www.tekdefense.com/tekcollect/
Noriben, which acts as an intelligent wrapper for procmon, will monitor process activity for files, services, registry, and network activity. This awesome tool takes things a step further by filtering out noise so that the analyst can focus on the details that matter!
I had the pleasure of attending BsidesROC this past Saturday in Rochester, NY while visiting family. The only previous experience I’d had with Bsides was in Las Vegas last summer, and I must say out of the many small conferences I have been to over the last couple of years, these guys did a very impressive job! The conference consisted of two tracks with a total of 15 talks.
Here’s a rundown of the events:
The Rochester chapter of TOOOL was kept very busy with a constant flow of lock pickers, both new and veteran, and managed to sell out of the kits they had available.
Interlock, the local hackerspace was also there and had a number of great projects to show off. I always love seeing hackerspaces at conferences!
Hacker Battleship, a unique play on the CTF which was really fun for the 24 who participated. Someone SQL injected the scoreboard too 😉
There were just over 200 attendees and everything flowed very smoothly. The event had the feeling of something that just happened there every weekend, and there were flying SHARKS! Albeit without laser beams for the safety of all present of course. 😉
Some other misc stats:
The 3D badges took approximately 50 hours to print and were awesome!
3129 DHCP leases were handed out throughout the day.
6 flying sharks and fish, including one flying red angry bird.