CyberSpeak's Podcast

Computer forensics, cybercrime, and computer security; Two former federal agents discuss the latest in cyber crime fighting and forensic techniques.

HackerNinjaScissors - Lauren Pearce - Journey of a Malware Analyst 03/16/2017

HackerNinjaScissors - Lauren Pearce - Journey of a Malware Analyst HackerNinjaScissors -- With Bret Padres. Today we talk with Lauren Pearce - a member of the IR team and a malware analyst for Los Alamos National Labs. Lauren shares with us her journey to become a malware analyst and talks about the importance of flailing and mentorship. I have a few free tickets to give out, so let me know if you want free tickets to the 2017 Incident Response Forum on April 4th, 2017, at the Mayflower Hotel in Washington DC. More info here -> and use Speak100 for $100 off the ticket price. Crypsis is hiring talented IR consultants!! Apply on our website: /episode/index/show/cyberspeak/id/5174368

HackerNinjaScissors - Robert M Lee - Cyber Threat Intel 02/04/2017

HackerNinjaScissors - Robert M Lee - Cyber Threat Intel New show in the Feed! HackerNinjaScissors -- With Bret Padres. New CyberSpeak Podcast reboot in the works. In the mean time check out this new show. In the inaugural show of HackerNinjaScissors, Bret Padres interviews Robert M Lee. Robert M. Lee is the CEO and Founder of the critical infrastructure cyber security company Dragos where he has a passion for control system traffic analysis, digital forensics, and threat intelligence research. He is also a non-resident National Cybersecurity Fellow at New America focusing on policy issues relating to the cyber security of critical infrastructure. For his research and focus areas, Robert was named one of Passcode’s Influencers, awarded EnergySec’s Cyber Security Professional of the Year (2015), and inducted into Forbes’ 30 under 30 for Enterprise Technology (2016). Links mentioned in the show: - dragos.com - @RobertMLee - robertmlee.org - littlebobbycomic.com - @_LittleBobby - https://www.amazon.com/Threat-Intelligence-Me-Children-Analysts/dp/1541148819 /episode/index/show/cyberspeak/id/5054720

CyberSpeak Aug 31 2015 - SRUM 08/30/2015

CyberSpeak Aug 31 2015 - SRUM CyberSpeak is BACK and we hope to publish a monthly podcast (more if I'm lucky). /episode/index/show/cyberspeak/id/3767743

CyberSpeak Feb 18, 2013 - Recon Mission 02/18/2013

CyberSpeak Feb 18, 2013 - Recon Mission This episode of CyberSpeak we conduct recon on and his new Windows registry analysis tool . Mark is the President of . This new registry tool could change the way we analyze the Windows registry. No longer will you be satisfied just looking st the current/active registry. /episode/index/show/cyberspeak/id/2221878

January 2013 CyberSpeak - Solid State Hard Drives Interview w/James Wiebe 02/02/2013

January 2013 CyberSpeak - Solid State Hard Drives Interview w/James Wiebe Happy 2013! I'm back and going to try to start getting some more shows out for you. This show we talk to James Wiebe, Director of Foensic Business Devleopment at about solid state hard drives, his research and the forensic implications. Email me at cyberspeak at gmail dot com if you have some suggestions for future show topics you want to hear. /episode/index/show/cyberspeak/id/2204997

CyberSpeak May 7, 2012 - Volume Shadow Copies 05/08/2012

CyberSpeak May 7, 2012 - Volume Shadow Copies This episode we discuss running AV and malware detection software on your forensic workstation and have an interview with Corey Harrell and discuss analyzing Volume Shadow Copies. /episode/index/show/cyberspeak/id/1938704

CyberSpeak - Special New Tool Release 12/01/2011

CyberSpeak - Special New Tool Release This special episode of CyberSpeak is an interview with Ken Privette with about their new tool release this morning called . They are releasing 1,000 copies for $100 each of this new tool. Go get a copy before they are all gone at . This special limited edition tool is limited to 10G of data. What does 10G of data look like, Nuix says it is an average of 241,165 Emails or 20333 Documents or 7069 Spreadsheets or 25514 Images. It can ingest all major forensic images (E01, DD, etc) /episode/index/show/cyberspeak/id/1771440

CyberSpeak Sep 26 2011 Registry Decoder 09/26/2011

CyberSpeak Sep 26 2011 Registry Decoder This week on CyberSpeak I interview Andrew Case, one of the developers of Registry Decoder, a National Institute of Justice sponsored application. Find it at www.registrydecoder.com /episode/index/show/cyberspeak/id/1718358

CyberSpeak August 28 2011 08/29/2011

CyberSpeak August 28 2011 This week on CyberSpeak, a quick thanks to everyone for pitching in on the ForensicsWiki - I saw over 100 new entries on everything from Sticky notes, mounting images, jump lists to people's BIOS. Jim Emailed asking who the mystery voice was in out CyberSpeak Sweepers - Karl over from CyberCon Security Solutions said wrote in to say he just ran across this site today and thought it might be a great resource for the listeners. It is not focused on Cyber Security but the concepts are the similar to help prepare for trial. . Shout out to Charles. Finally, Loren Wrote in and said during the interview, Keith Jones mentioned preparing for court by asking others for their opinions. Are there any ramifications of bringing others into the case like that? /episode/index/show/cyberspeak/id/1697522

CyberSpeak August 21, 2011 08/21/2011

CyberSpeak August 21, 2011 CYBERSPEAK Notes - Aug 21st, 2011 /episode/index/show/cyberspeak/id/1692262

CyberSpeak August 15, 2011 08/15/2011

CyberSpeak August 15, 2011 /episode/index/show/cyberspeak/id/1687601

CyberSpeak August 8 2011 08/08/2011

CyberSpeak August 8 2011 Chris Hanesn caught cheating...on his mistress Launch of the CDFS www.cdfs.org, DFirst starts this week and more. /episode/index/show/cyberspeak/id/1683226

CyberSpeak July 18, 2011 07/18/2011

CyberSpeak July 18, 2011 /episode/index/show/cyberspeak/id/1666877

CyberSpeak-Forensics and the 4th Amendment 06/26/2011

CyberSpeak-Forensics and the 4th Amendment /episode/index/show/cyberspeak/id/1650596

CyberSpeak June 20 2011 06/19/2011

CyberSpeak June 20 2011 This week (OK, this quarter) on CyberSpeak, FTK 4 coming out using Postgres database rather than Oracle. During listener email we discuss if special language is needed for search warrants when collecting volatile data, imaging RAM or conducting on scene triage. Imaging SSD drives using the ( /episode/index/show/cyberspeak/id/1644318

CyberSpeak April 5, 2011 Watch out, Here Comes the Garbage Collector 04/05/2011

CyberSpeak April 5, 2011 Watch out, Here Comes the Garbage Collector Interview with Scott Moulton, leading forensic authority on Solid State Drive Forensics /episode/index/show/cyberspeak/id/1564502

CyberSpeak Jan 16, 2011 - Prefetch Yourself 01/16/2011

CyberSpeak Jan 16, 2011 - Prefetch Yourself FREE 16Gig IPADs for everyone!!! Have I got a deal for you. Have you experienced a feeling of inadequacy? Feel like you're not in the "In Crowd"? When sitting at a Starbucks, on the metro or just lounging around the house, do you feel like you could be so much more productive but something's missing. Don't despair, SANS is coming to the rescue. That's right, book your SANS 408, 414, 560 Class or ANY 4-5-or 6 Day course offered via ONDEMAND now through February 2, and receive a FREE 16GB WiFi enabled iPad(TM). I am teaching SANS FOR408: Computer Forensic Essentials vLive! course starts March 1 and meets Tue/Thu evenings . /episode/index/show/cyberspeak/id/1455223

CyberSpeak November 16, 2010 11/16/2010

CyberSpeak November 16, 2010 Last show for two weeks. I'm traveling to Bangkok and Singapore. See you in 2 weeks. Send me Email. /episode/index/show/cyberspeak/id/1358114

CyberSpeak November 8, 2010 11/07/2010

CyberSpeak November 8, 2010 /episode/index/show/cyberspeak/id/1330516

CyberSpeak November 1, 2010 10/31/2010

CyberSpeak November 1, 2010 This week on CyberSpeak we have listener email, an interview with , CTO and Co-Founder of , Web site of the week is a real productivity app called . P.S. Sorry for the slight audio problem, I accidentally turned up my gain knob on my mixer. George did his usual magic to fix it. One, last thing, Rob lee and SANS provided a 50% discount code for LOCAL LAW ENFORCEMENT ONLY, good on any SANS training class. Listen to the show for the code....and no, they do verify so ONLY Local LE can use it. /episode/index/show/cyberspeak/id/1311615

CyberSpeak October 25, 2010 10/24/2010

CyberSpeak October 25, 2010 This week on CyberSpeak, I discuss the leak of another 400,000 classified military documents by Wikileaks. I also discuss listener email where we have comments about Mount Image Pro's Virtual Forensic Computer (VCF) and what it does that FTK Imager and Live View do not do. This weeks interview is with Sean Morrisey, the Managing Director of , maker of the iPhone Forensic Software called Katana. Also discuss Katana's new Hammerhead program to monitor blackberry phones. Also, this week I briefly discuss the forensic implications of the new Mac Book Airs. I also talk about Eddie Sheehy's article on DFI News web site titled . I also give out a 50% discount code to SANS training classes. My web pick of the week is . This is a web site that will help you control computers across the network when you are helping friends or giving presentations. /episode/index/show/cyberspeak/id/1292663

CyberSpeak Oct 18, 2010 10/17/2010

CyberSpeak Oct 18, 2010 /episode/index/show/cyberspeak/id/1257719

CyberSpeak May 24 2010 05/23/2010

CyberSpeak May 24 2010 PURCHASERS OF THE CYBERSPEAK IPHONE APP - CHECK OUT THE EXTRAS BUTTON FOR SPECIAL BONUS CONTENT THIS WEEK!!! LET ME KNOW WHAT YOU THINK.This week on CyberSpeak we interview Sam Guttman, President of the , an international vendor neutral computer forensic certification authority. We also discuss listener email, cell phone spyware, upcoming , and a listener taught . Don'f forget to user your CyberSpeak DISCOUNT CODE of "COINS-OC" for 10% off any SANS course.We also start a dialog on the future of expectation of privacy in this world of social networking where everyone is telling everyone where they are, what they are doing, etc. Is this going to change privacy laws. Also, what are YOU doing about identifying "Cloud" evidence during an investigation. Web sites of the week: and /episode/index/show/cyberspeak/id/869132

CyberSpeak April 19 2010 04/19/2010

CyberSpeak April 19 2010 /episode/index/show/cyberspeak/id/761017

CyberSpeak April 4, 2010 04/04/2010

CyberSpeak April 4, 2010 Listener Email - Thanks to all for the great feedback on the Internet Predator Tracker interview. Also, Timothy, who clearly does not know us because he started his email "Hello GENTLEMEN". Just kidding, keep the emails coming.News and CommentaryAaron sent us an interesting link to an article from the Times Argus discussing forensics and the backlog.Bret and I discuss a really interesting on computer forensics. This is a long read but some very interesting reading. Check it out Exclusive InterviewToday we have an interview with Kristtinn G who works for a company called Skigner in ICELAND and in Kristinn in collaboration with Rob Lee, or friend from SANS and former OSI colleague created a wonderful new tool called Log2Timeline. You don't want to miss that interview because if you are not using Log2Timeline you are missing the boat in forensic analysis of Windows based systems. Legal NewsWell, look above about the Canadian Court Ruling on computer forensics. We think that is enough legal today.Website of the WeekOvie recommends taking a look at the new Microsoft MESH (https://www.mesh.com) to help sync all your files across all operating systems ANDOvie took the and challenges YOU ALL to take it too. and save a life. Bret recommends to test your browser performance. /episode/index/show/cyberspeak/id/753191

CyberSpeak March 21, 2010 03/22/2010

CyberSpeak March 21, 2010 Ovie's SANS Forensic 408 class is coming up in Nashville, TN on May 3-7. If you're staying at the Marriott be sure you use the CyberSpeak Discount, COINS-OC.Listener Email - Luke sent us a photo showing him listening to the podcast from his Blackberry while on the beach in Miami - Aaron, thanks for the email alerting us about the webpage - Sorry we broke your CyberSpeak mood in the last show! - Paul wrote us to say that while drinking his Shamrock Shake, Ovie scared the crap out of him when he screamed - Bobby wrote in to tell us about his new Pro-Lite 2 from Amazon. Let us know how it works out Bobby!News and Commentary A murder suspect was caught based on cat fur picked up while at the victims house. A man fired from a Texas auto dealership used an Internet service to remotely disable cars and set off car horns of more than 100 vehicles.Exclusive InterviewToday we have an interview with Joe Seanor, a former Senior AOL Investigator. Joe has developed the software. Joe spent 10 years with the CIA and also 7 years with AOL in investigative roles. Now he has developed a number of pieces of software to aid investigators in keeping notes on Internet investigations. Legal NewsU.S. v. McAteer, 2010 WL 551412 (D.N.J.)After obtaining consent, two FBI agents searched a suspect computer for child pornography. After a "preview scan" failed to turn up any evidence, the suspect gave consent for a manual search. During trial the defendant moved to suppress CP discovered during the manual search on the grounds that it exceeded the consent. The court, however, disagreed and found the defendant's consent not so limited.Website of the Week /episode/index/show/cyberspeak/id/742898

CyberSpeak February 28, 2010 03/04/2010

CyberSpeak February 28, 2010 - Bret talks about his new toys- Ovie flees the country, againNews and CommentaryAfter a two year long investigation, two individuals have been sentenced to jail time for child molestation.Via Forensics has released a beta version of its open source Android Forensics application.Exclusive InterviewThis week we speak with about the need for law enforcement and digital forensics specialists to manage their online resumes. With so many different social networking sites, it's important that they all appear consistent in voice and purpose.Tech TopicsHal Pomeranz has a great post on the SANS forensic blog detailing tips for how to conduct a forensics investigation against a FreeBSD system.A new FireFox Internet history analysis program, dubbed FoxAnalysis, has been released. This software purports to gather all kinds of interesting goodies from FireFox history files.Website of the Week - Randomly generated passwords (Thanks Ralph) - Keep a list of web pages your want to read from your computer or iPhone - Allow you to read a webpage later from your computer, Kindle or iPhone - Get cash for your old gadgetsCheck out our iPhone App! /episode/index/show/cyberspeak/id/707573

CyberSpeak Febuary 21, 2010 02/22/2010

CyberSpeak Febuary 21, 2010 - Check out our iPhone App on the Apple App Store.Listener Email - Darrell asks how to build your forensics business - Bobby wants to know what computer bag Ovie recommends, check out the News and CommentaryFormer boyfriend posts an ad on Craig's List pretending to be his ex-girlfriend and leads viewers to believe the female is asking to be raped. One individual then broke into her home and raped her in response to the ad.Bret and Ovie discuss a number of websites related that give people a little too much information on where you are.Remember to look beyond the metadata when looking at audio and video files. An FBI investigator reviewed 14 video tapes and found evidence that lead to a sexual abuse conviction.Exclusive InterviewThis week we speak with Sean Morrissey of . Katana produces forensic imaging software for the iPhone called "Lantern." The Lantern software is a Mac based tool that purports to provide a "legally defensible forensic methodology for the iPhone." Website of the Week /episode/index/show/cyberspeak/id/696080

CyberSpeak February 7, 2010 02/07/2010

CyberSpeak February 7, 2010 Listener Email - Aaron sends us to tell about using Stitcher feed - Paul writes to ask how someone without forensics background should go about starting out. Ovie and Bret give some pointers. - Ovie is starting a course on !News and CommentaryA fugitive wanted for questioning about a number of murders committed suicide before law enforcement officers were able to find the bodies of the victims. Using computer forensics, however, the officers were able to recover GPS data and locate the remains.Exclusive InterviewTodd Shipley, president and CEO of speaks to use about looking into the cloud to find forensics data. He speaks to use about products from his company to assist in capturing this kind of evidence.Website of the Week - A new tool by George Starcher to brute force PGP passphrases - WiFi Investigator to identify the location of WiFi devices /episode/index/show/cyberspeak/id/690644

CyberSpeak January 31, 2010 01/31/2010

CyberSpeak January 31, 2010 DoD CyberCrime Conference was last week in St Louis MO and was their biggest event ever with over 1100 attendees, 175 presentations and 15 simultaneous tracks. Check out the SANS website (http://www.sans.org/) for the SANS 2010 Orlando coming up March 6-15.News and CommentaryA hole found in the AES-256 encryption on USB flash drives from these three companies allows unauthorized access to the devices without knowing the password.UK based company Creedent finds large amounts of devices left in pockets of clothes sent to dry cleaners and left behind in taxis.Exclusive InterviewRobert Botcheck, founder and owner of Tableau, joins us today. Tableau, makes some of the most popular and reasonably priced write-blocking devices. Their newest product is a software imaging program that promises such features as multi-threading and sequential scheduling. Check out the interview for more information.Website of the Week - /episode/index/show/cyberspeak/id/687722

CyberSpeak's Podcast

TOPICS