I am retiring this social media account. Find me as @hal_pomeranz@infosec.exchange
Orlando, FL
Joined November 2008
- Tweets 19,311
- Following 237
- Followers 13,672
- Likes 12
Trivia Answer #28 - False. XFS allocates inodes on demand, and the inode number is assigned based on the inode’s position on the disk.
2
That’s a lot of development and testing effort to just be abandoned. But whether it’s TSK or something new, we need an Open Source, cross-platform filesystem interpreter that supports common modern file systems.
3
I agree. But with funding we could pay a resource to manage the project and clear out the backlog.
1
Hal Pomeranz retweeted
Welp… my husband got laid off from his job today 😞
This may be a long-shot, but if any of you work in tech and know of an open position that fits his skillset, shoot me a DM.
(If you don’t, but would like to buy him a beer—he’s had a rough day: paypal.me/jprice 💖)
25
151
4
234
The #DFIR community needs funding and resources put towards libsleuthkit. And everybody needs to share their "private" forks where they have fixed bugs and added new file systems support. Hackathon anybody?
10
16
Just wanted to mention that my Linux Forensics training is happening next week. There is still time to sign up, and class size will be small. Hope to see you there!
Live Linux Forensics training coming up @WWHackinFest Deadwood! Let's do some daily Linux Forensics trivia as a lead-up! wildwesthackinfest.com/deadw…
1
5
9
Shout out to @fierry137 for chiming in with the correct answer.
1
Hal Pomeranz retweeted
This is powerful and hits me right in the gut.
So I believe this is what they call “a personal essay.” (It’s personal AF.)
Judaism accounts for what to do if someone dies before you have made amends to them.
lithub.com/rabbi-danya-rutte…
1
4
Daily Linux Forensics Trivia #28 - How do Chrome and Firefox web browser artifacts differ on Linux systems as compared to Windows/Mac?
2
1
4
However, @ldsopreload mentioned several other places where login information is tracked, including the btmp (failed logins), and lastlog (detail on most recent login for each user) logs.
Trivia Answer #26 - I should have been more specific here. I was looking for logs that track successful user logins over time and I was thinking of Syslog's LOG_AUTHPRIV stream (usually /var/log/auth.log or .../secure), the wtmp file, and the audit.log.
2
1
Hal Pomeranz retweeted
Rapidly increase #DFIR skills:
1) Perform attack(s) against your own system/VM
2) Document steps in detail
3) Find artifacts for each step
4
80
6
149