Volatility – Official Training in Sao Paulo, Brazil

My friends, how are you? Finally, I can tell you a good news: next year (February, 02nd 2015), it will be available, in Sao Paulo, a training for forensic professionals about the most impressive, outstanding and incomparable forensic memory analysis tool of the world: VOLATILITY.

Michael Ligh, Jamie Levy and Andrew Case (The Volatility’s developers) are going to be in Sao Paulo for teaching a full week training (40 hours) about the Volatility. After having exchanged several messages (since March) with Michael Ligh, now everything is OK and this course is scheduled.

The official pages about the course follow below:

http://www.memoryanalysis.net/#!New-Event-in-So-Paulo-Brazil-Feburary-2nd—6th-2015/c1zo4/BFB221C1-986F-4839-BD6A-D61FFAAFFFD0

http://www.memoryanalysis.net/#!memory-forensics-training/c1q3n

http://www.memoryanalysis.net/

For now, my recommendation it’s to buy the newly published book (912 pages!) from Volatility team:

http://www.memoryanalysis.net/#!amf/cmg5

As Michael, Jamie and Andrew usually teach this course only in big events such as Black Hat, it’s a unique opportunity for learning Volatility by their developers.

Have a nice day.

Alexandre Borges.

(LinkedIn: http://www.linkedin.com/in/aleborges)

Finding modified, accessed and created files with macmatch.exe

People, good morning. How are you? Do you know how to discover what files changed between two defined dates ? Use macmatch.exe tool:

http://alexandreborgesbrazil.files.wordpress.com/2014/07/macmatch1.pdf

Have a nice day.

Alexandre Borges

(http://www.linkedin.com/in/aleborges)

Playing with ZFS Encryption In Oracle Solaris 11.1

Hello people, how are you? I’m a bit away from the blog because I am completely overloaded at work, but it was released my new article about ZFS on OTN (Oracle Technical Network):

http://www.oracle.com/technetwork/articles/servers-storage-admin/solaris-zfs-encryption-2242161.html

Moreover, of course, you can read all published articles about ZFS so far on blog from great Rick Ramsey:

https://blogs.oracle.com/OTNGarage/entry/get_your_zfs_on

Have a nice day.

Alexandre Borges.

(LinkedIn: http://www.linkedin.com/in/aleborges)

PS: All my articles are reviewed by the excellent and outstanding Karen Perkins. Thanks, Karen. :)

Delegating a ZFS Dataset to a Non-Global Zone in Oracle Solaris 11.1

Dear friends, how are you ? It was published my new article about ZFS on OTN (Oracle Technical Network):

http://www.oracle.com/technetwork/articles/servers-storage-admin/solaris-zfs-dataset-2227061.html

I hope you like it.

Have a nice day.

Alexandre Borges

(LinkedIn: http://www.linkedin.com/in/aleborges)

Windows Command Line Interface (reposting)

A couple of months ago I published two articles about Windows command line interface. However, I’ve realized that most people don’t remember these commands in a daily forensic analysis, and then I’ve decided to publish them again:

http://tinyurl.com/lfq5e38

http://tinyurl.com/mwcvmw5

Have a nice day.

Alexandre Borges

(LinkedIn: http://www.linkedin.com/in/aleborges)

Playing with ZFS Shadow Migration in Oracle Solaris 11

Dear readers, how are you? It follows my new article on OTN (Oracle Technical Network):

http://www.oracle.com/technetwork/articles/servers-storage-admin/zfs-shadow-migration-2220997.html

Sincerely, I hope you like it.

Have a nice day.

Alexandre Borges

(LinkedIn: http://www.linkedin.com/in/aleborges)

Playing with Swap in Oracle Solaris 11.1

People, here are the links to my new article about ZFS on OTN (Oracle Technical Network):

http://www.oracle.com/technetwork/articles/servers-storage-admin/monitor-swap-solaris-zfs-2216650.html

https://blogs.oracle.com/OTNGarage/

I hope you like it.

Have a nice day.

Alexandre Borges

(http://www.linkedin.com/in/aleborges)