Author Archives

• Ask Lesley InfoSec Advice Column: 2017-01-30

  By hacks4pancakes on January 30, 2017 • ( 2 )

  Thanks for another wonderful week of submissions to my “Ask Lesley” advice form. Today, we’ll discuss digital forensics methodology, security awareness, career paths, and hostile workplaces.   Dear Lesley, I’m a recent female college graduate that didn’t study computer science… Read More ›

• Thwart my OSINT Efforts while Binging TV!

  By hacks4pancakes on January 25, 2017 • ( 18 )

  

  There’s been a bit of a social media uproar recently about the data collection practices of people search service FamilyTreeNow. However, it’s certainly not the first, only, (or last) service to provide potentially uncomfortable private information about people on the… Read More ›

• Ask Lesley InfoSec Advice Column: 2017-01-19

  By hacks4pancakes on January 19, 2017 • ( 3 )

  Thanks for your interesting question submissions to “Ask Lesley”! This column will repeat, on no specific schedule, when I receive interesting questions that are applicable to multiple people. See further details or submit a question, here. Without further ado, today… Read More ›

• How do security professionals study threat actors, & why do we do it?

  By hacks4pancakes on December 12, 2016 • ( 3 )

  

  I receive a lot of great questions about my work in Digital Forensics and Incident Response (DFIR), and while I’ve written a bit on the topic of threat actors and attribution, I’ve been repeatedly asked some interesting questions about this… Read More ›

• Lesley on Cigital’s Silver Bullet Podcast

  By hacks4pancakes on December 1, 2016 • ( 1 )

  Listen as Gary and Lesley discuss incident response, digital forensics, security engineering, security certifications, and more. Source: Show 128: Lesley Carhart Discusses Incident Response and Digital Forensics | Cigital

• Health and Wellness in InfoSec

  By hacks4pancakes on November 29, 2016 • ( 11 )

  

  Most of us know that being a hacker isn’t exactly the lowest stress gig out there. With the holiday season fast approaching, thinking about taking care of our well-being and that of our colleagues, family, and friends becomes even more… Read More ›

• Using Team Cymru’s MHR with Volatility

  By hacks4pancakes on October 27, 2016 • ( 2 )

  

  Today we’ll briefly discuss crosschecking Team Cymru’s Malware Hash Registry against files found in memory or hibernation files by Volatility. We’re going to do it by hand at the command line, as a quick exercise in some ways to manipulate… Read More ›

• 101 Ways I Screwed Up Making a Fake Identity

  By hacks4pancakes on October 13, 2016 • ( 5 )

  

  As most of you know, my professional area of expertise in security is incident response, with an emphasis on system / malware forensics and OSINT. I’m fortunate enough in my position in the security education and con community to sometimes… Read More ›

• Nation State Threat Attribution: a FAQ

  By hacks4pancakes on October 11, 2016 • ( 4 )

  

  This blog consists of seven very different infosec professionals’ responses to frequently asked questions about attribution, with thoughts, experiences, and opinions (focusing on nation state attribution circa 2016).

• What’s a Challenge Coin, Anyway? (For Hackers)

  By hacks4pancakes on October 6, 2016 • ( 0 )

  

  So what are these “challenge coins”? Challenge coins come from an old military tradition that bled into the professional infosec realm then into the broader hacker community through the continual overlap between the communities. In some ways like an informal… Read More ›