Hello, welcome to the Wednesday, September 28, 2016 edition of the Sans and Storms and a Stormcast.

My name is Johannes Ulrich and I'm recording from Jacksonville, Florida.

Great diary today from Basile about the intersection of disk forensics and memory forensics essentially, well, Windows and other operating

systems as well, do save memory to disk as part of the hibernation process. So what you can do

is you can take that file and then investigate it and essentially get the state off the system last time it went into

hibernate which of course sort of gives you a snapshot back in time as basil puts it and he's

talking about how volatility can be used here in order to examine that copy of memory and in

recent weeks there have been a number of large-scale denial of service attacks, for

example, one against Brian Grebs, but now others as well, that reached sort of in the

terabit per second range.

And apparently, these denial of service attacks were caused by web-connected cameras.

We have of course been observing these in and of things being compromised with the last few years,

including these cameras and now apparently the problem has to reach the dimension where

these cameras can easily be used to

overpower even very powerful networks. In the last case they had about 145,000 of these

cameras being used and each one of these cameras produced from 1 to 30 megabits per second.

Of course at this scale it also becomes a little bit difficult to measure the exact size of denial of service attack

as sometimes networks leading to the target are already being saturated so the full firepower off that attack doesn't actually reach the intended

victim. From a defensive point of view, there isn't really much you can do other than trying

to sign up for anti-denial of service services which do appear to cope at this point with these attacks, but then again, those services can be

pricey in particular if you are the target of very large attacks like this.

Cross-site scripting vulnerabilities are, of course, still a big problem, and at this point,

...