iPhone Mobile Forensics | TryHackMe IOS Forensics
In this video walkthrough, we demonstrated the process of analyzing a dump taken from an IOS device namely iPhone.

Video is here
🗣David-hawk


🎖@malwr

Investigation into the state of NiM coded malware
🗣sysopfb

Nice. That team does good work
👤Hartescout


🎖@malwr

retoolkit - offline installer containing many reversing tools
🗣nandu88

As long as you’re working on Windows...
I’m not objecting to the fact it’s a Windows collection, just the fact that neither the Project nor the README think it worth mentioning...
👤gwynevans

It would be nice to have a table comparing installed tools between this one and flare vm.
👤movr0spblxr2

Is it safe to install...i don’t know. Haha...love it.
👤earthmisfit


🎖@malwr

The Wine development release 6.4 is now available.
🗣_-ammar-_

What's new in this release (see below for details):

\- Support for the DTLS protocol.

\- Fontset support in DirectWrite.

\- Dialog for editing Access Control entries.

\- Theming support for a few more common controls.

\- Support for Korean Wansung encoding. - Various bug fixes.


7416 Support multiple independent displays for PowerPoint, OpenOffice.org, etc
16676 RTG Bills 2.x (VB6 app) reports 'ADO error 1BD Object doesn't support this action' on startup (msado15 'connectionGetIDsOfNames' is a stub)
25323 Civilization IV Beyond the Sword crashed when trying to start a new game.
31814 Gecko should clean up when upgrading
36463 wine can't load unstripped gecko builds
36697 64-bit InstallShield engine COM server 'ISBEW64.exe' crashes or hangs (32-bit InstallShield based installers in 64-bit WINEPREFIX)
37011 acid3.acidtests.org can't load with builtin IE
38744 support UNITYNETWORKAREAREGION
39381 32-bit Turbocad 8.0 LTE 'CrashSender.exe' utility crashes in WMI Query "SELECT * FROM Win32NetworkAdapterConfiguration where IPEnabled='True' and index=1"
41433 Acrobat Reader XI (11.0.8): Annotations are empty
42827 Canon MP Navigator EX 4.x/5.x installer crashes due to setupapi SPFILENOTIFYFILEINCABINET handler/callback insufficiencies
46969 Multiple 64-bit WDM kernel drivers want Windows 8+ 'ntdll.RtlQueryRegistryValuesEx' (WIBUKEY, Denuvo Anti-Cheat)
48127 Soldiers of Anarchy (demos & full game 1.1.2.178), crashes with an 'Unknown error' message when starting a level
48879 NVIDIA PhysX System Software 9.12.1031 installer fails ('Add64BitReg' VBScript action needs minimal 'WbemScripting.SWbemNamedValueSet' implementation)
49531 Multiple Qt5 applications spam the console continuously with 'fixme:netprofm:connectionGetAdapterId' ('INetworkConnection::GetAdapter' returns incorrect adapter GUID)(Futubull 10.x, Melodics V2, Topaz Video Enhance AI 1.x)
49830 Obduction stops with "fatal error"
49998 widl doesn't support winrt types (runtimeclass, delegate, parameterized types, ...)
50123 The Elder Scrolls V: Skyrim SE has rendering glitches with vulkan renderer
50263 Entropia Universe: Won't Start the Game from Client Loader
50377 Banished cast shadows are broken with Vulkan renderer
50422 Multiple games (Horizon Zero Dawn, Serious Sam 4) crash on start on Nvidia due to missing unwrap for VKOBJECTTYPESURFACEKHR
50563 The Witcher 3: Wild Hunt has missing sunlight with Vulkan renderer
50632 Neverwinter: Broken graphics (texturing)
50641 Wine cmd handles incorrectly if-for on a single line
50642 Wine cmd handles incorrectly if-set when expanding variable with brackets
50667 Final Fantasy XI Online: Opening movie doesn't play (redux).
50678 Filmotech v3.91: partial black area
50698 ::wcsrtombs does not NULL "const wchart PSource" parameter in Wine.
50704 QueueUserAPC() Has Incorrect Error Set When Called On Terminating Thread
50706 6.2 hangs on grey, then crashes Snapdragon855(+) Android 10
50731 All Winelib applications built with winegcc/wineg++ segfault on startup as of Wine 6.3
50732 Multiple Adobe products fail to start due to Wine 6.3 breaking Adobe License Manager/FLEXnet Licensing Service (Acrobat 8.x, FrameMaker 8)
50740 The Suffering (Midway Games) crashes due to missing wmvcore 'IWMSyncReader2', CLSID '{faed3d21-1b6b-4af7-8cb6-3e189bbc187b}'
50744 continuous spamming of fixme:msctf:InputProcessorProfileMgrGetActiveProfile in console
50769 notepad: menu bar items and title text are not translated.
50774 DirectWrite should use mac platform name entry for English, if Windows entry is missing
50781 cl.exe fails to open program database
50786 WINEPATH env var broken by "ntdll: Set environment variables from the registry on the Unix side.
👤_-ammar-_


🎖@malwr

Reverse Engineering Microsoft Exchange DearCry Ransomware | Brief Analysis
🗣MotasemHa

Two suggestions: get a better mic. Sometimes your voice sounds muffled. It’s not your accent, I’m spanish and I have a good ear for accents but your voice doesn’t come in clear.
Second: you need to zoom in because if someone is watching on a phone, we cannot see what you are seeing. It just looks like blobs to me. I wish I could understand what you are doing because I want to learn, but I just can’t from what you posted. Your set up looks nice but it needs to be edited to show code bigger. I understand if you see this on a computer you can see it big but not everyone is on a computer 24/7.
👤Simsimma76


🎖@malwr

IoT Malware Journals: Prometei (Linux)
Technical analysis of Prometei (Linux):
https://cujo.com/iot-malware-journals-prometei-linux/
🗣kernelv0id


🎖@malwr

Kuiper is a digital investigation platform that provides a capabilities for the investigation team and individuals to parse, search, visualize collected evidences (evidences could be collected by fast traige script like Hoarder). Collaborate with other team members on the same platforms.
🗣digicat

Kuiper is OK for small businesses but is severely limited for anything bigger in my opinion. We had a look at it and it proved to be very basic and not always very reliable.
👤norfolkench4nts


🎖@malwr

Trapdoor - A serverless HTTP honeypot/honeytoken
Available in the AWS Serverless Application Repository, Trapdoor is an open-source honeytoken platform with alerting, client fingerprinting and history tracking.

Github: [https://github.com/3CORESec/Trapdoor](https://github.com/3CORESec/Trapdoor)
Blog: https://blog.3coresec.com/2021/03/trapdoor-serverless-http-honeypot.html

I would love feedback from the community in case someone wants to chat about it.
🗣0x229


🎖@malwr