Micropatching Unknown 0days in Windows Type 1 Font Parsing
🗣dielel

so this micropatching thing... why do that as opposed to relying only on the official Microsoft patches? pros/cons?
👤PotatOS_Cannon


🎖@malwr

Forensic tools in your lab
Good morning, say were evaluating our current toolset and seeing if there is any good tools look into purchasing in our lab. We currently do hr investigations, security incidents and ediscovery. Our current tool sets include fex, axiom, encase, nuix, cellebrite, and blacklight. What do you guys use?

Thanks!
🗣doob89

X-Ways.
Both for acquiring and in the lab.
👤Goremageddon08

I really need to take a look at X-Ways- I see it constantly recommended.
👤no_sushi_4_u

We use encase for acquiring, but then investigate the data with Axiom. At the moment our environment is not compatible with the remote acquisition process of Axiom and the lawyers like E01 files instead of zip, but I guess Axiom is addressing that in Cyber. I hope it ends up working because encase is a very powerful tool, but the layout and flow are far from being as user friendly and convenient as Axiom. Plus when it comes to support, encase...well..it sucks. Magnet is immediately on the task when we have any problems.
👤barleyhogg1


🎖@malwr

Crash course on x86_64 Assembly
🗣icebp

Found this on the /r/reverseengineering subreddit and thought it was really good. It takes some C examples and breaks them down in a pretty detailed and easy to understand manner. the examples are pretty simple but he covers a lot of nuances of reading assembly and I felt like I got better at some things. Hope someone finds it useful!
👤icebp


🎖@malwr

Imperva WAF Bypass
🗣kev-thehermit

Nice work.
👤cryptogram

Wholesome stuff!
👤crabique


🎖@malwr

[DrayTek - Unauthenticated RCE in Draytek Vigor 2960, 3900 and 300B (CVE-2020-8515)](https://www.skullarmy.net/2020/01/draytek-unauthenticated-rce-in-draytek.html)
🗣cyberg0100


🎖@malwr