Meta tags:

Headings (most frequently used words):

january, 2014, meeting, december, november, for, mi4n6, monday, 19, tuesday, 17, thursday, september, call, presentations, se, michigan, dfir, group, 2015, 16, wednesday, august, 20, 2013, location, contributors, blog, archive, talks, 21st, now, 17th, agenda, reboot, 22nd, no, 20th,

Text of the page (most frequently used words):
share (21), the (15), january (13), for (10), #meeting (10), this (9), and (9), unknown (8), pinterest (7), facebook (7), blogthis (7), email (7), posted (7), are (7), will (7), december (6), 2014 (6), comments (6), november (5), you (5), forensic (5), september (4), livonia (4), have (4), mi4n6 (4), one (4), hunting (4), images (4), with (4), host (4), august (3), talks (3), 21st (3), room (3), presentations (3), group (3), student (3), like (3), 17th (3), please (3), let (3), know (3), forensics (3), dll (3), 2013 (2), 2015 (2), blog (2), 432 (2), emu (2), posts (2), instead (2), tuesday (2), having (2), first (2), 22nd (2), currently (2), looking (2), speakers (2), call (2), thursday (2), going (2), presentation (2), wednesday (2), campus (2), can (2), presenting (2), what (2), tools (2), create (2), interested (2), monday (2), analyze (2), that (2), based (2), reflective (2), injection (2), mimikatz (2), powershell (2), network (2), detection (2), michigan (2), dfir (2), simple, theme, powered, blogger, february, april, july, october, archive, jack, crook, contributors, 38777, mile, 400, location, subscribe, atom, home, older, tomorrow, couldn, dig, speaker, claddagh, irish, pub, safe, happy, holidays, see, 20th, welcome, new, year, spin, again, but, decided, make, quarterly, monthly, because, large, base, industry, professional, format, present, reboot, number, follow, food, provided, hash, tag, feed, open, source, internal, evil, bl4ck_0ut, just, getting, started, digital, concepts, regarding, confusing, terminology, clones, bit, stream, copies, often, used, inconsistently, further, complicating, issue, talk, attempt, clear, confusion, instructive, clarification, image, well, not, addition, provide, comprehensive, look, several, different, free, along, methods, access, embedded, data, sallyvdv, agenda, comment, our, move, came, short, any, now, here, lined, receiving, intelligence, about, malicious, activity, thing, finding, your, own, environment, another, walk, through, how, threats, ids, rules, actionable, worldwide, corporation, hundreds, thousands, end, points, mcafee, hips, tool, discussion, technique, loads, into, memory, process, using, password, dumper, combined, joe, bialek, scripts, attacker, remotely, dump, credentials, without, ever, writing, their, disk, attack, demonstrated, difference, smb, remoting, traffic, analysis, time, permitting, williamlpauley, doug, clendening, topics, these, meetings, anything, related, incident, response,

Text of the page (random words):
mi4n6 se michigan dfir group mi4n6 se michigan dfir group the topics for these meetings will be anything that is related to incident response host network forensics or detection monday january 19 2015 talks for january 21st we ll be meeting at the livonia campus room 432 here are the talks we have lined up host based detection doug clendening receiving intelligence about malicious activity is one thing finding it in your own environment is another i ll walk you through how we analyze threats and create ids rules that are actionable in a worldwide corporation with hundreds of thousands of end points host based mcafee hips will be the tool of discussion reflective dll injection with powershell and mimikatz williamlpauley reflective dll injection technique loads a dll into the memory of a process by using the password dumper mimikatz combined with joe bialek s powershell scripts an attacker can remotely dump credentials without ever writing their tools disk this attack will by demonstrated and we will analyze the difference in smb vs ps remoting network traffic and host analysis time permitting posted by unknown at 5 50 am no comments email this blogthis share to x share to facebook share to pinterest tuesday december 16 2014 december now january going to move the meeting to january 21st we came up one short for presentations in december if you have any interested in presenting in january please let me know posted by unknown at 1 10 pm no comments email this blogthis share to x share to facebook share to pinterest monday november 17 2014 call for presentations december 17 meeting we ll be having our meeting on wednesday december 17th and are currently looking for speakers please let me know if you are interested posted by unknown at 7 24 am 1 comment email this blogthis share to x share to facebook share to pinterest thursday september 4 2014 september 17th agenda forensic on forensics sallyvdv for a student just getting started in digital forensics concepts regarding forensic images can be confusing terminology like images clones bit stream copies and forensic images are often used inconsistently further complicating the issue this talk will attempt to clear up the confusion by presenting an instructive clarification of what a forensic image is as well as what it is not in addition it will provide a comprehensive look at several different free tools to create forensic images along with methods to access the embedded data hunting open source for internal evil bl4ck_0ut 1 blog hunting 2 feed hunting 3 hash tag hunting it ll be at 7 pm at emu livonia campus room number to follow food will be provided posted by unknown at 12 49 pm no comments email this blogthis share to x share to facebook share to pinterest wednesday august 20 2014 mi4n6 reboot we are going to spin the group up again but decided to make it quarterly instead of monthly because of the large student base we d like to have one student presentation and one industry professional presentation as the format first meeting is on september 17th at 7 00 pm please let us know if you d like to present posted by unknown at 7 52 am no comments email this blogthis share to x share to facebook share to pinterest thursday january 2 2014 call for presentations meeting january 22nd welcome to the new year we ll be having or first meeting january 22nd and are currently looking for speakers posted by unknown at 1 34 pm no comments email this blogthis share to x share to facebook share to pinterest tuesday november 19 2013 no meeting november 20th no mi4n6 meeting tomorrow couldn t dig up a speaker we ll be claddagh irish pub instead have a safe and happy holidays see you in january posted by unknown at 7 04 am no comments email this blogthis share to x share to facebook share to pinterest older posts home subscribe to posts atom meeting location emu livonia 38777 w 6 mile rd 400 livonia mi room 432 7 9 pm contributors jack crook unknown blog archive 2015 1 january 1 talks for january 21st 2014 5 december 1 november 1 september 1 august 1 january 1 2013 9 november 1 october 2 august 1 july 1 april 1 february 2 january 1 simple theme powered by blogger