Justin Prosco (@jprosco) profile picture

Justin Prosco

@jprosco

Security, Reverse Engineering, Malware Analysis, Incident Response, Forensics

 New York
Joined April 2009
  • Tweets339
  • Following462
  • Followers585
Introducting WxTCmd! A tool to process Windows 10 (1803+) Timeline databases! binaryforay.blogspot.com/201… #DFIR
6
142
5
209
Justin Prosco retweeted
nickharbour (@nickharbour) profile picture
nickharbour@nickharbour1 Sep 2017
Early registration is up! 2017.flare-on.com/register It can take a few min. to get your confirmation. #flareon4
2
26
2
22
FakeNet-NG is now cross-platform and in @REMnux! It's the Pythonic alternative to the venerable INetSim on Linux: fireeye.com/blog/threat-rese…
1
46
63
I set up a personal VPN in AWS using @AlgoVPN over the weekend. Only took a few minutes and works great!
1
1
4
Verifying myself: I am jprosco on Keybase.io. YEE2Fb3NPuCWqrI6kjmqnOd82Hw8LHWGk9eX / keybase.io/jprosco/sigs/YEE2…
Redline 1.20 is now available! It introduces support for collection from & analysis of Window 10 systems bddy.me/2qx4jIC #DFIR
Image from Mandiant (part of Google Cloud) (@Mandiant)
2
55
4
49
I’m pleased to release Monitor.app! fireeye.com/blog/threat-rese…
1
88
7
130
it seems Win10 creators edition changed layout of appcompatcache, but AppCompatCacheParser has you covered! #DFIR binaryforay.blogspot.com/201…
3
34
3
36
Justin Prosco retweeted
sleuthkit (@sleuthkit) profile picture
sleuthkit@sleuthkit18 Jan 2017
The Sleuth Kit 4.4.0 was released. Visual Studio 2015 support, slack space in DB, 4K NTFS sectors, and more. sleuthkit.org/sleuthkit/down… #dfir
86
71
Justin Prosco retweeted
Chris King (@raikiasec) profile picture
Chris King@raikiasec4 Jan 2017
Announcing FirePhish! A fully featured phishing framework! Full documentation/instructions are available at github.com/Raikia/FirePhish #infosec
Image from Chris King (@raikiasec)
Image from Chris King (@raikiasec)
52
3
85
Justin Prosco retweeted
Michael Sikorski (@mikesiko) profile picture
Michael Sikorski
@mikesiko21 Nov 2016
Congrats to @jake_valletta on being named to @Qualcomm Security Hall of Fame qualcomm.com/connect/contact… original blog: fireeye.com/blog/threat-rese…
1
9
18
With PowerShell on Linux, it might actually be the year of the Linux desktop we've all been waiting for.
Justin Prosco retweeted
Peter Kacherginsky (@iphelix) profile picture
Peter Kacherginsky
@iphelix3 Aug 2016
Public release of FakeNet-NG - Next Generation Dynamic Network Analysis Tool #Malware #Reversing #FakeNet #FLARE github.com/fireeye/flare-fak…
GitHub - mandiant/flare-fakenet-ng: FakeNet-NG - Next Generation Dynamic Network Analysis Tool

GitHub - mandiant/flare-fakenet-ng: FakeNet-NG - Next Generation Dynamic Network Analysis Tool

FakeNet-NG - Next Generation Dynamic Network Analysis Tool - mandiant/flare-fakenet-ng

github.com
3
78
2
78
Overview Windows logons - when do reusable credentials remain on destination systems? Guide: technet.microsoft.com/en-us/…
Image from Florian Roth ⚡️ (@cyb3rops)
1
301
10
386
Justin Prosco retweeted
FredCasa (@0xF2EDCA5A) profile picture
FredCasa@0xF2EDCA5A6 Jul 2016
I just updated the @volatility shimcache memory plugin to support Windows 10 (git.io/vKtqR)
34
2
39
Great post by @TalosSecurity on detecting MULTIGRAIN POS malware exfiltration through DNS frequency analysis xitter.cf/TalosSecurity/status/7…
Cisco Talos Intelligence Group (@TalosSecurity) profile pictureCisco Talos Intelligence Group
@TalosSecurity29 Jun 2016
Talos Blog: Detecting DNS Data Exfiltration tinyurl.com/jb88zh2
Thanks @505Forensics for organizing the BBQ last night! xitter.cf/pdxbek/status/74649038…
1
FLOSS: FireEye Labs Obfuscated String Solver. Automatically extract encrypted strings from malware. No PhD req'd! fireeye.com/blog/threat-rese…
Mandiant Cybersecurity Consulting

Mandiant Cybersecurity Consulting

Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

cloud.google.com
1
56
4
68
Justin Prosco retweeted
Lee Holmes (@Lee_Holmes) profile picture
Lee Holmes@Lee_Holmes13 May 2016
Amazingly deep (700+ pages!) dive into Windows Security Auditing and Monitoring events - microsoft.com/en-us/download…
1
213
337
Finally made it on the #FireEye blog! Check out my technical analysis of the recently patched CVE-2016-2060! fireeye.com/blog/threat-rese…
1
17
22
Load more