Onderzoek op thumbs.db

Thumbs.db is een systeembestand met een hidden/verborgen kenmerk. Het bestand wordt gegenereerd op het moment dat de thumbnails / miniatuurweergaven wordt ingesteld in het menu view/beeld. Het bestandje bevat dan ook kleine weergaven van de plaatjes die in die map staan. Het bestand vormt een goede basis voor forensisch onderzoek. Een goede casus om studenten voor te leggen staat in het onderstaande bestand. Het betreft een “echt” onderzoek uitgevoerd op een computer met “foute” plaatjes. Het is eenvoudig om het onderzoek uit te voeren en geeft een goed inzicht in de forensische waarde van de thumbs.db.
het bijbehorende PDF bestand is hier te downloaden:

thumbnails onderzoek

Het onderzoek wordt uitgevoerd door gebruik te maken van de FTK. De demo versie is met een kort handleiding is hier te vinden:

FTK download

Posted in Uncategorized | Tagged , , | Leave a comment

Tools: Microsoft Security Essentials

Microsoft Security Essentials

Microsoft Security Essentials biedt realtime-beveiliging van uw thuis-pc tegen virussen, spyware en andere schadelijke software. Deze versie is in het Nederlands.
Voor andere talen ga naar deze link http://www.microsoft.com/security_essentials/

Microsoft Security Essentials kan gratis worden gedownload bij Microsoft, is eenvoudig te installeren en te gebruiken en wordt voortdurend bijgewerkt, zodat u er zeker van kunt zijn dat uw pc wordt beveiligd door de nieuwste technologie. U kunt gemakkelijk zien of uw pc veilig is: groen is goed. Zo eenvoudig is het.

Microsoft Security Essentials wordt onopvallend en efficiënt op de achtergrond uitgevoerd, zodat u uw Windows-computer op de gewenste manier kunt gebruiken, zonder onderbrekingen of lange wachttijden.

Download de Vista 64 bit NL versie
Download de Vista 32 bit NL versie
Download de XP 32 bit NL versie

Bekijk de instructie video

Posted in Tools | Leave a comment

Wikileaks: the importance of blogging in Egypt

Egypt’s bloggers are playing an increasingly important role in broadening the scope of acceptable political and social discourse, and self-expression. loggers’ discussions of sensitive issues, such as sexual harassment, sectarian tension and the military, represent a significant change from five years ago, and have influenced society and the media.

The role of bloggers as a cohesive activist movement has largely disappeared, due to a more restrictive political climate, GOE counter-measures, and tensions among bloggers.
However, individual bloggers have continued to work to expose problems such as police brutality and corporate malfeasance.
Comment: The government generally allows bloggers wide latitude in posting material critical of the GOE. Exceptions to this policy are bloggers who directly insult President Mubarak or Islam, and the government has arrested and jailed bloggers who have crossed these red-lines. The GOE has also arrested activists, such as XXXXXXXXXXXX and XXXXXXXXXXXX, who have used blogging to organize and support protests (refs A and C). Activists are increasingly writing blogs to advance their political aims. Contacts accurately point out that bloggers have ceased to function as a cohesive activist movement. It is noteworthy that bloggers did not play a significant role in the most recent example of mass cyber-activism — the April 6, 2008 strike orchestrated through Facebook (ref G).

—————————–
The Current State of Blogging
—————————–

(C) Egypt has an estimated 160,000 bloggers who write in Arabic, and sometimes in English, about a wide variety of topics, from social life to politics to literature. One can view posts ranging from videos of alleged police brutality (ref B), to comments about the GOE’s foreign policy, to complaints about separate lines for men and women in government offices distributing drivers’ licenses. One NGO contact estimated for us that a solid majority of bloggers are between 20 and 35 years old, and that about 30 percent of blogs focus on politics. Blogs have spread throughout the population to become vehicles for a wide range of activists, students, journalists and ordinary citizens to express their views on almost any issue they choose. As such, the blogs have significantly broadened the range of topics that Egyptians are able to discuss publicly.

——————————————-
Expanding Discourse and Personal Expression
——————————————-

(C) XXXXXXXXXXXX of the Egyptian Initiative for Personal Rights told us that blogging allows Egyptian youth to air their views about social and political issues in ways that were “unimaginable five years ago.” XXXXXXXXXXXX said that blog debates currently cover formerly “taboo” topics, such as Christian-Muslim tensions and the military’s potential role in succession. XXXXXXXXXXXX, a blogger who now concentrates on journalism and film-making, described how bloggers began public discussions of issues, such as sexual harassment and the legal status of Bahai’is, that were previously too sensitive to discuss. XXXXXXXXXXXX attributed the media’s sympathetic treatment of the Bahai’is’ national identification card case in January 2008, in comparison with skeptical media coverage of the issue in 2004, to bloggers’ efforts.

(C) Two young upper middle-class bloggers told us that expressing themselves on their blogs is a “bright spot” for them in the current atmosphere of political, economic and social malaise. They noted that blogging provides them with an outlet, which they perceive as relatively anonymous, to disseminate criticism. One of them expressed satisfaction over being able to attack the “religious hypocrisy” and the “serious problems” in the society. A third blogger told us that she uses her blog to discuss whatever issues may be bothering her: her views on dysfunction in the Sinai, the prime minister’s latest speech, or the Obama administration’s Middle East diplomacy. She has written critically about issues, such as the XXXXXXXXXXXX (ref F), without any GOE attempts to silence her.

—————————————
Relationship with the Independent Media
—————————————

(C) XXXXXXXXXXXX noted that the open atmosphere created by bloggers has positively influenced the independent media, especially satellite television, to discuss sensitive issues such as sexuality and abortion. XXXXXXXXXXXX of the American University in Cairo’s Adham Center for Media Studies, explained that while bloggers originally pushed the independent press to tackle new issues in 2006, the independent press has now overtaken the blogs in breaking important news. XXXXXXXXXXXX asserted that while bloggers did ground-breaking reporting on sexual assaults in 2006 before the independent press covered the issue, bloggers are now recycling news stories that the independent press breaks. According to XXXXXXXXXXXX, the relationship between bloggers and the independent press has come full circle, as bloggers now depend on the independent press for news.

——————————-
Originally an Activist Movement
——————————-

(C) While the voices of individual bloggers are currently making their mark on expanding public discourse and personal expression, bloggers originally saw themselves as a cohesive movement of political activists. XXXXXXXXXXXX, said that in 2006, bloggers with diverse orientations — secular, Islamist, and leftist — worked together to organize events, such as a sit-in protest at the Judges’ Club (ref I) and demonstrations in Tahrir Square. XXXXXXXXXXXX characterized bloggers during this period as activists who worked closely with civil society organizations to raise public awareness of issues, such as sexual assault. Because of bloggers’ independent, relatively anonymous identities, XXXXXXXXXXXX continued, they were able to engage on these issues more freely than NGOs. XXXXXXXXXXXX believes that female bloggers’ personal accounts of being harassed put an important personal face on the problem.

(C) Since 2006, XXXXXXXXXXXX said, bloggers have not been able to replicate the same kind of political activism for a number of reasons. He cited growing tensions and divisions within the blogger community, where Islamist bloggers are openly critical of secular and Christian bloggers. As part of the GOE’s increasing crack-down on political reformers since 2005-6, XXXXXXXXXXXX said, State Security (SSIS) began to target bloggers. He accused SSIS of orchestrating his ouster from a job at the XXXXXXXXXXXX, and of pressuring western news organizations to dismiss other bloggers who challenged the GOE. XXXXXXXXXXXX noted that many bloggers have abandoned their blogs due to this pressure, and are focusing instead on careers in journalism and civil society.

(C) XXXXXXXXXXXX explained that as political activism waned after 2006, bloggers lost their context for advocacy. He concluded that there is currently no political opening for bloggers to push for significant change, and predicted that the next opportunities may be during the 2011 presidential election. Human rights activist XXXXXXXXXXXX separately echoed XXXXXXXXXXXX’ assessment, opining that there is a current “despondency” among bloggers, whom she considers to be part of the broader activist community. She asserted that in the current “political stagnation,” bloggers are bereft of compelling and achievable political causes, but she predicted they would play a crucial role “during the eventual succession.”

———————————-
Bloggers as Human Rights Activists
———————————-

(C) While XXXXXXXXXXXX minimizes bloggers’ current impact as activists, veteran civil society advocates view bloggers’ contributions as significant. XXXXXXXXXXXX of the Cairo Institute for Human Rights Studies, stressed the importance of bloggers’ concern with torture and press freedom. At a public lecture in February following the screening of a documentary film about blogging, human rights lawyer Gamal Eid lauded XXXXXXXXXXXX for posting an alleged police sodomy video a few days earlier (ref B), and for breaking the El-Kebir police brutality case. In November 2007, a court sentenced two polic officers to three years in prison for assaultin and sodomizing bus driver Imad El-Kebir. The cse gained notoriety after XXXXXXXXXXXX posted a cell phoe video recording of the attack (ref H).

(C Eid cited the “3,000 hits per day” on XXXXXXXXXXXX’ blogas evidence of his influence, asserting that XXXXXXXXXXXX is more widely read than “Rose Al Youssef,” th SSIS-backed daily newspaper. Separately, a human rights lawyer specializing in torture at the Hisham Mubarak Law Center marveled at XXXXXXXXXXXX’ power to expose police brutality on his blog. Bloggers have also been active on other issues. For example, Tamer Mabrouk, who has blogged about corruption, gained attention in January when a court fined him for accusing a chemical company of dumping toxic waste into the Suez canal and a nearby lake (ref D); his lawyers are appealing the fine.

Posted in Wetgeving, wikileaks | Tagged , , | Leave a comment

Bitdefender study reveals porn and malware are closely related

A significant 63% of the users attempting to find adult content on their computers compromised their computers’ security on multiple occasions, according to BitDefender.


The study consisted of a survey concerning the psychological background of adult on-line content use, and a net-research aiming to identify the ensuing malware and privacy related issues. More than 72% of the 2,017 respondents interviewed in the study admitted that they had searched for and accessed adult content sites (78% men and 22% women). The study also uncovered that of the most accessed pornographic materials, an impressive 91%, were videos that can be downloaded from different sources including torrents, Web sites and hubs.

Real-time adult content sites, such as video-chats and adult dating, ranked second in respondents’ preferences with 72%. The study went on to reveal that 69% of the interviewed participants declared that they usually access adult content web sites from home, while 25% access them from their work places and only 6% from other locations (Internet cafés, etc.). The main motivations for accessing adult sites were the need to relax (54%) and curiosity (38%).
As expected, adult-content sites and, in general, sex-related topics are very attractive for cybercriminals. When asked if they infected their computers searching for this kind of materials, 63% of respondents admitted that they had had malware-related problems more than one time. The sources of malware were especially links sent via e-mail and free downloadable videos.

On the other hand, the net research on the safety of URLs leading to pornographic sites revealed that of the 1,000 tested links, 29% were infected with different kinds of malware, especially Trojans and spyware. Moreover, when looking on blogs and on different other “collaborative platforms”, I could find more than 500 credentials exposed on the Internet (accounts and passwords to paid adult-content sites). The way they were posted, combined with other accounts and passwords of the same user suggested the fact that they were obtained using a malicious piece of software installed on the victim’s computer.
“This BitDefender survey confirms that users should think twice when accessing these pornographic sites since this is an area that cyber criminals continue to exploit,” states Sabina Datcu, E-Threats Analysis and Communication Specialist and author of the survey.

“Over 60 percent of respondents admitted that they have had malware-related issues more than one time as a direct consequence of accessing adult content. In the end, the findings of this study should make users consider whether accessing these sites is worth compromising their systems, data and work.”

Posted in Cybercrime, study | Tagged , , | Leave a comment

Cain Abel password herstel voor Windows

cain abel

Cain & Abel is a password recovery utility that allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols.
It covers some security aspects/weakness present in protocol’s standards, authentication methods and caching mechanisms; its main purpose is the simplified recovery of passwords and credentials from various sources, however it also ships some “non standard” utilities for Microsoft Windows users.
Cain & Abel has been developed in the hope that it will be useful for network administrators, teachers, security consultants/professionals, forensic staff, security software vendors, professional penetration tester and everyone else that plans to use it for ethical reasons.

The author will not help or support any illegal activity done with this program. Be warned that there is the possibility that you will cause damages and/or loss of data using this software and that in no events shall the author be liable for such damages or loss of data. Please carefully read the License Agreement included in the program before using it.
The latest version is faster and contains a lot of new features like APR (Arp Poison Routing) which enables sniffing on switched LANs and Man-in-the-Middle attacks. The sniffer in this version can also analyze encrypted protocols such as SSH-1 and HTTPS, and contains filters to capture credentials from a wide range of authentication mechanisms.
The new version also ships routing protocols authentication monitors and routes extractors, dictionary and brute-force crackers for all common hashing algorithms and for several specific authentications, password/hash calculators, cryptanalysis attacks, password decoders and some not so common utilities related to network and system security.
Note: Some antivirus and antispyware programs flag Cain & Abel as being infected/malware, although the application is perfectly safe and does not pose a threat to your system. This is called a ‘false positive’. The term false positive is used when antivirus software wrongly classifies an innocuous (inoffensive) file as a virus. The incorrect detection may be due to heuristics or to an incorrect virus signature in a database. [Similar problems can occur with antitrojan or antispyware software.]


Posted in Tools | Tagged , , | Leave a comment