Today we talk with Lauren Pearce - a member of the IR team and a malware analyst for Los Alamos National Labs.  Lauren shares with us her journey to become a malware analyst and talks about the importance of flailing and mentorship.

I have a few free tickets to give out, so let me know if you want free tickets to the 2017 Incident Response Forum on April 4th, 2017, at the Mayflower Hotel in Washington DC.  

More info here -> incidentresponseforum.com and use Speak100 for $100 off the ticket price.

Crypsis is hiring talented IR consultants!!  Apply on our website: www.crypsisgroup.com

HackerNinjaScissors --  With Bret Padres. www.crypsisgroup.com

New CyberSpeak Podcast reboot in the works.  In the mean time check out this new show.

In the inaugural show of HackerNinjaScissors, Bret Padres interviews Robert M Lee.

Robert M. Lee is the CEO and Founder of the critical infrastructure cyber security company Dragos where he has a passion for control system traffic analysis, digital forensics, and threat intelligence research. He is also a non-resident National Cybersecurity Fellow at New America focusing on policy issues relating to the cyber security of critical infrastructure. For his research and focus areas, Robert was named one of Passcode's Influencers, awarded EnergySec's Cyber Security Professional of the Year (2015), and inducted into Forbes' 30 under 30 for Enterprise Technology (2016).

Links mentioned in the show:

- dragos.com
- @RobertMLee
- robertmlee.org
- littlebobbycomic.com
- @_LittleBobby
- https://www.amazon.com/Threat-Intelligence-Me-Children-Analysts/dp/1541148819

This episode on CyberSpeak we briefly discuss possible implications to U.S. forensicators with the release of the Ashley Madison database (hopefully not). We also have a great interview with Yogesh Khatri, an assistant professor at Champlain College and a security researcher about the SRUM or System Resourse Usage Monitor forensic artifact. Website of the week: Has your email been Pwned? Check it out here -> Have I Been Pwned

Listen to the show for more details.  100% of all sales go to charity "Room to Read", an organization that works in collaboration with communities and local governments in developing countries to develop literacy skills and a habit of reading among primary school children, and support girls to complete secondary school with the life skills they’ll need to succeed in school and beyond.

ALERT-Download and install on the computer you want it registered to.  Initial installation will lock it to that computer.

In the News, Google, The Company with the motto - DO NO EVIL - agreed to forfeit $500 million to the U.S. Government for allowing -- and assisting in many case -- online Canadian pharmacies to place AdWords ads targeting customers in the United States resulting in the unlawful importation of controlled and non-controlled prescription drugs into the United States.  

This weeks interview is with Chris Pogue, Mr. Sniper Forensics!

Thanks to Dan Website of the week is Workflowy https://workflowy.com/ 

Administrative

I attended a nice Apple Forensic Event this week in Reston VA - Saw a lot of friends and had a good time.  Ryan gave a great presentation on Apple forensics.  Ryan runs the AppleExaminer.com 

Paraben's Forensic Innovation Conference 

PFIC is fast approaching and you know, it's becoming one of the the must attend conference each year for digital forensic and eDiscovery professionals. This year, there are seven pre-conference bootcamps that are included in your conference registration fee of $399.00. You can attend any single bootcamp and then the rest of the conference tracks and labs for this rate.  This is all being brought to you by our friends over at the Paraben Corporation (Amber Schroader). 

You can register by heading over to pfic-conference.com

http://www.forensicswiki.org - We all should go check this site out, sign up for an account and start contributing.  This is the way we can all give back to the community.  Write a How-To or something to give back to the forensic community. 

Listener Email -

Richardo from Navada Concerned about those performing collateral duty of doing digital forensic examinations.  Frustrated to read article after article in digital forensic publications that cover the deconstruction of a complicated piece of malware. he would rather have articles that rehashed digital forensic basics and covered free automated/low cost tools that help me do my job efficiently and reliably.

News-

London Police are using Flicker to allow the public to help identify people involved in the looting following riots in London. 

http://www.flickr.com/photos/metropolitanpolice/sets/72157627267892973/

http://thenextweb.com/uk/2011/08/09/police-use-flickr-to-identify-london-riot-suspects/

INTERVIEW -

Welcome back to the show Drew Fahey, VP of Products at Blackbag Technologies. 

Web Sites of the Week-

http://www.forensicswiki.org

http://t.co/vEmtzCA - A guide to FaceBook Security

KEEP THE EMAILS COMING to CyberSpeak@gmail.com

This week on CyberSpeak, Luby and Jared Save the GMail Planet, Detective Garcia uncovers Fraud on Sesame Street.  Congrats to the Secret Service and FBI on a great investigation of a 26 year old Brooklyn man who plead guilty in U.S. District Court in Alexandria, VA for his role in managing a credit card fraud operation that operated throughout the East Coast of the United States. California Prosecutors will not file charges against Gizmodo for its purchase of an iPhone 4 prototype (boo).  Interview this week is Keith Jones, Co-Owner and Senior Partner at Jones Dykstra and Associates Inc., about the do's and don'ts of testifying.  Tech topic, MoonSol's Dumpit released for FREE.  Perfect for imaging RAM on 32 or 64 bit Windows System.  It just does not get any easier than this-Check it out.  Web pick of the week is http://Infosecupdate.com. KEEP THE EMAILS COMING!

A quick show with George Starcher discussing his experience with password cracking using Access Data’s DNA and Amazon’s Elastic Compute Cloud.  Check out his video tutorials at https://www.georgestarcher.com/?tag=amazon-ec2.  We also discussed his Crowbar tool, https://www.georgestarcher.com/?page_id=256,

Web picks of the weeks are www.threatexpert.com and www.thumbtack.com

This week on CyberSpeak, a listener alerted me to my faux pas with the names on the Casey Anthony case, the two that testified about computer forensics were Sandy and Kevin (not Steve) and of all things, I called the Bresident of Access Data Brian Carrier instead of Brian Karney. Sorry guys!

This weeks interview of Josh Goldfoot, an attorney and author of the recent paper titled ”The Physical Computer and the Fourth Amendment” published in the Berkley Journal of Criminal Law.  This paper discusses how the forth amendment applies to computer forensics and how we may be hurting ourselves by using certain words and explanations.

Web site of the week is a neat little web browsing and twitter application called A+ that give you your feeds on the left and browser on the right. Click on any twitter message the web page they linked to shoes up in your browser window automatically.  Check it out at http://www.aplus-app.com

http://winfe.wordpress.com) and a shout out to Sandy and Steve for their great testimony in the Casey Anthony trial. Check it out at on Day 24 segment 4-6.

In the news, A computer repairman was arrested for allegedly planting spyware on dozens of computers he fixed and remotely taking hundreds of photos of women in their homes partially clothed or naked. If you see the message "You should fix your internal sensor soon. If unsure what to do, try putting your laptop near hot steam for several minutes to clean the sensor." DONT take your laptop into the shower. Check it out at

http://latimesblogs.latimes.com/lanow/2011/06/computer-repairman-arrested-for-allegedly-taking-hundreds-of-nude-pictures-of-women-remotely.html

I got fooled into readng an article because of a Miss-leading article about Seals using forensic tools on Osama Bin Ladin's compters.

http://www.1105newsletters.com/t.do?id=7979845:3405472

Interview this week is with Mike and Mike about Carbon Black.

An absolutly MUST read article "The Physical Computer and the Fourth Amendment" by Josh Goldfoot. Awesome document that is Brilliantly referenced. It is a long read but a MUST read. We will discuss next week. Read up before next podcast (who thought you would get Home Work from CyberSpeak?).

Website of the week:

Steve Gibson’s password checker – how long would it take to crack your password and the best HTML5 webpage I have seen. Check out this personalized music video staring any address you tell it to. http://TheWildernessDowntown.com

I will be teaching another SANS 408 Forensics-Windows in Depth VLIVE course starting Tuesday August 23rd (Every Tuesday and Thursday Night for 3 hours a night)

DONT FORGET TO USE OUR DISCOUNT CODE OF COINS-OC for 10% off.

But wait, sign up before this week, before June 22, you can get a 16 gig iPad2. The codes are 0526_iPad2BLK (for a black iPad) or 0526_iPad2WHT (for white)

So what do you call yourself?  

A computer/Digital Evidence forensic technician

A computer/Digital Evidence forensic examiner

A computer/Digital Evidence forensic analyst

A computer/Digital Evidence forensic expert

We need to define these terms.

Paraben has released a new version of P2 Commander. Version 1.7 now supports Mac file format as well as vmWare and VirtualPC images. Users will notice an increase in the speed of processing evidence in v1.7. visit www.paraben.com

Mark Wade is a Digital Forensic Analyst with Harris Corporation (Crucial Security Programs), performing digital forensics for a Federal Law Enforcement agency as a government contractor.

permits law enforcement officers, approximately 90 minutes after lawfully arresting a suspect and transporting him to a detention facility, to conduct a warrantless search of the text message folder of a cell phone they take from his person after the arrest. http://www.courtinfo.ca.gov/opinions/documents/S166600.PDF

Web site of the week is www.passpack.com  - Free Online password manager for groups

This week we have interview with Kristinn Gudjonsson, developer of Log2TimeLine.  Kristinn gives us an update on what is on the road ahead for Log2TimeLine.  In Listener Email Joe from Northeast Wisconsin Technical College wrote in to say that blanking the password or even cracking the password is possible without the LiveView LE version.  Luby Wrote in to tell how much he enjoyed SANS 508 and learning about SuperTimelines. Luby also explains how open wireless access points can eliminate the threat of Firesheep. We also give Luby a “special ringtone” for his wife’s phone.  In News we talk about an iPhone bug and an vulnerability to PayPal’s app that could cost you money.  In Legal News, 2 cases send criminals to jail. Tech Topics cover Windows LNK files and the Web Site of the Week is a Qwiki 

This week, I discuss Access Data's two new products.  Web sites of the week include www.pipl.com and www.peekyou.com.  Check them out if you are looking for info on someone. 

The Personal Data Privacy and Security Act was approved by the Senate Judiciary Committee by a vote of 15-5 The bill would required notifications of not just individuals affected by a data breach, but also, in some cases, credit reporting agencies and the U.S. Secret Service (not FBI). It would establish a new Office of Federal Identity Protection within the FTC. Let's get ready to Rumble earns 400 million in IP revenue.

Web Sites of the Week:

http://statbrain.com

http://www.searchlores.org/defpasslist1.htm 

http://www.trapcall.com/

http://www.google.com/insights/search/#

Welcome back to CyberSpeak. Bret and Ovie are back in the country. This show we have an interview with the developers of Highlighter, a new log analysis tool, Jed Mitten - Senior Consultant and Jason Luttgens - Principal Consultant from Mandiant. Check out this free tool at www.mandiant.com/software/highlighter.htm. Also, check out the Mandiant blog for some other tools. In listener email we discuss U3 thumb drives and encryption and schools doing data recovery without a private investigatorÃs license. Helix pro is being released and the Polytechnic University in Brooklyn has discovered a digital fingerprint that will allow you to tie a digital image to a specific made and model of camera. Web picks are www.tineye.com and www.spokeo.com .

Ovies web sites of the week - Instant Domain Search and  

Graffiti and Bretâs pick was http://www.plinko.net/404/links.asp?type=cat&key=16

In the news, the first spammer sentenced under CAN-SPAM act, VA budgets 20 million for credit protection for its victims, Secret Service agent spins a tale but surveillance video unravels her story, and Japanese police learn a lesson in security.  The Slurper aggregates 6 unsecure WiFi access points  and web sites of the week: Drobo robotic storage, Cheapest Gas, and Vehicle crash test site.

A great web site pick of the week is at Remote Exploit.org. 

Upcoming Conferences:

LayerOne 2006
Apr 15-16, Los Angeles, CA
http://www.layerone.info/index.html
                2006 GFIRST Conference
                Apr 30-May 05, Orlando, FL
                http://www.us-cert.gov/GFIRST
                Computer and Enterprise Investigations Conference (CEIC) 2006
                May 03-06, Las Vegas, NV
                http://www.ceic2006.com

The show is about 1 hour 9 mins long.  Thanks to Brian for pointing out how to put links in the show notes!  Thanks to Tim for editing the show again!