Excellent introduction to analyzing malicious documents. Good to know which documents are most vulnerable, and that there are many freeware tools available for us to analyze them on a budget. Thanks!
It was a good explanation of software available in the REMnux installation with provided examples to inspect suspected programs. Definitely enough to make someone pursue it more.
It was my first NYC4SEC meetup, and I was not disappointed. Par delivered a brief, enjoyable, informative presentation. He provided useful tool demonstrations using real-world examples that made sense. Looking forward to more meetups.
Thank you Larry for a great presentation. Hope you were able to get home OK! Very interesting information about the EXIF metadata that we sometimes ignore on "smart" devices. There is a program I have used in the past to sanitize images before distribution called stripper.exe (sexy-time name!) http://www.steelbytes.com/?mid=30 that is a freebie worth checking out.
Thanks to all you who came to the meet-up - see everyone soon.
Doug
Larry's talks on Geotag Stalking & Research Fail were informative as well as entertaining. Hopefully those in attendance can spread the word to their friends & family about the dangers of GeoTagging images.
That was my first time seeing Larry present. He presented very well. He was animated and kept me pretty much focused on his discussion. And he courteously answered / politely observed seemingly non sequitur questions / comments. I would have ranked him higher if his first presentation was cut down to 30-45 minutes and his second presentation was done in about 5 minutes. I did like his positive message at the end of the second one. It's just that my interest was starting to wane the longer the presentation went. For example, I think he used three separate examples to describe the same risk. I don't think all three were needed to convey the same risk.
Corey's presentation on NFC was excellent (and eye opening). You better get up to speed on the subject because it will be rolling out in the US sooner than you think. The meeting was also an excellent networking opportunity (as usual).
We are a group of computer security, forensics and compliance professionals based in the Tri-State area meeting to discuss the latest trends in threats and responses as well as what to do when attacked.