Time for new challenges: Working for McAfee Foundstone Services

This is the post I should have written months ago, actually back in November last year, when I joined the Foundstone practice (part of McAfee Strategic Security Services) as Principal Architect for EMEA.

But time has been scarce, with lots of new developments and challenges both in my personal and professional life, including spending a month in New York (thanks to the Foundstone crew in Manhattan for their hospitality!), teaching Malware Analysis along with Christiaan Beek, Melissa Augustine and the rest of the Foundstone EMEA team in BlackHat Abu Dhabi and catching ‘chombies’ and other malware on various Incident Response engagements across Europe.

[Read more…]

My ERP got hacked, an Introduction to Computer Forensics, available for download

Thanks to Hakin9 (and especially to Ewa Dudzic) and the readers that selected my articles as the best in the latest issues, the series of two articles “My ERP got hacked, an Introduction to Computer Forensics” are now available for free download from the magazine site.

I’ve been also authorised to post them on my website, so feel free to download them from the updated “Papers & Presentations” page, where I have also posted some of the comments I received from several readers, as well as an interesting reference to my article from Harlan Carvey.

Happy reading!

A follow up on the Indian embassy issue

It’s been a busy two weeks trying to put together the training material I’ll be using to teach Incident Response and Computer Forensics to some of my colleagues in other geographies across Europe, Asia and Australia, and that will kick-off in Leiden in approximately 10 days. Meanwhile, the latest news about the Indian embassy reported earlier on this blog, spread quickly on the Internet.

Many sites reported on the issue, from antivirus vendors to security professional’s blogs and online magazines. Whilst most of them just echoed what others said, some shed more light on it posting some interesting notes and only a few did an in-depth analysis worth of mention, the most relevant being:

[Read more…]