Kristinn Guðjónsson

The Adobe Flash player can store various information regarding user settings to "remember" things like the preferred volume a user likes in a video player, saved game settings, whether or not the user allows the flash player to connect to the web camera, etc. With the introduction of various ad...

Google Chrome stores the browser history in a SQLite database, not unlike Firefox. Yet the structure of the database file is quite different. Chrome stores its files in the following locations: Linux: /home/$USER/.config/google-chrome/Linux: /home/$USER/.config/chromium/Windows Vista (and Win 7):...

I decided to do some malware analysis as a part of some presentation I had to do. And since I went through the process, I decided to post it here if anyone is interested. To begin with, I needed to find some malware to analyze. And a great place to find live links to active malware is to visit the...

In the last post I talked about the tool log2timeline, and mentioned a hypothetical case that we are working on. Let's explore in further detail how we can use the tool to assist us in our analysis. How do we go about collecting all the data that we need for the case? In this case we know that the...

Using timeline analysis during investigations can be extremely useful yet it sometimes misses important events that are stored inside files on the suspect system (log files, OS artifacts). By solely depending on traditional filesystem timeline you may miss some context that is necessary to get a...

Analysis of a browser history almost always comes up, no matter what is being investigated. And despite Firefox being one of the most popular browsers currently used there aren't many tools out there that can read and display browser history (at least in a human readable format). There are tools...