corpus.blog
41554 blogs · [ { "id": "01a087a9-7e7f-73bd-bdd7-c20d44f14a3c", "title": "Someone’s Been Messing With My Subnormals!", "url": "http://moyix.blogspot.com/2022/09/someones-been-messing-with-my-subnormals.html", "published_at": "2022-09-06T15:00:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d45095d24", "title": "On Building 30K Debian Packages", "url": "http://moyix.blogspot.com/2022/02/on-building-30k-debian-packages.html", "published_at": "2022-02-05T23:36:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4568f982", "title": "A couple ideas that went nowhere", "url": "http://moyix.blogspot.com/2018/10/a-couple-ideas-that-went-nowhere.html", "published_at": "2018-10-17T17:58:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d461146be", "title": "Of Bugs and Baselines", "url": "http://moyix.blogspot.com/2018/03/of-bugs-and-baselines.html", "published_at": "2018-03-20T03:25:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d470ce878", "title": "NYC Area Security Folks – Come to SOS!", "url": "http://moyix.blogspot.com/2016/10/nyc-area-security-folks-come-to-sos.html", "published_at": "2016-10-20T15:40:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4771a18e", "title": "The LAVA Synthetic Bug Corpora", "url": "http://moyix.blogspot.com/2016/10/the-lava-synthetic-bug-corpora.html", "published_at": "2016-10-08T19:06:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4823d8db", "title": "Fuzzing with AFL is an Art", "url": "http://moyix.blogspot.com/2016/07/fuzzing-with-afl-is-an-art.html", "published_at": "2016-07-21T13:32:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d485bf928", "title": "The Mechanics of Bug Injection with LAVA", "url": "http://moyix.blogspot.com/2016/07/the-mechanics-of-bug-injection-with-lava.html", "published_at": "2016-07-11T12:07:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4927473c", "title": "How to add a million bugs to a program (and why you might want to)", "url": "http://moyix.blogspot.com/2016/06/how-to-add-a-million-bugs-to-a-program.html", "published_at": "2016-06-07T13:08:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d49477b7a", "title": "PANDA Plugin Documentation", "url": "http://moyix.blogspot.com/2016/01/panda-plugin-documentation.html", "published_at": "2016-01-06T00:16:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d49767fa3", "title": "PANDA VM Update October 2015", "url": "http://moyix.blogspot.com/2015/10/panda-vm-update-october-2015.html", "published_at": "2015-10-02T20:55:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4a103f93", "title": "(Sys)Call Me Maybe: Exploring Malware Syscalls with PANDA", "url": "http://moyix.blogspot.com/2015/08/syscall-me-maybe-exploring-malware.html", "published_at": "2015-08-27T20:37:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4a54b440", "title": "One Weird Trick to Shrink Your PANDA Malware Logs by 84%", "url": "http://moyix.blogspot.com/2015/08/one-weird-trick-to-shrink-your-panda.html", "published_at": "2015-08-24T13:55:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4afad6c3", "title": "PANDA VM Update April 2015", "url": "http://moyix.blogspot.com/2015/04/panda-vm-update-april-2015.html", "published_at": "2015-04-13T23:22:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4bc2e044", "title": "100 Days of Malware", "url": "http://moyix.blogspot.com/2015/03/100-days-of-malware.html", "published_at": "2015-03-24T12:39:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4cb2908c", "title": "Reproducible Malware Analyses for All", "url": "http://moyix.blogspot.com/2014/12/reproducible-malware-analyses-for-all.html", "published_at": "2014-12-10T01:25:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4cfb9d28", "title": "Replaying Regin in PANDA", "url": "http://moyix.blogspot.com/2014/11/replaying-regin-in-panda.html", "published_at": "2014-11-26T22:56:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4cfcfc13", "title": "PANDA VM Updated", "url": "http://moyix.blogspot.com/2014/10/panda-vm-updated.html", "published_at": "2014-10-07T00:43:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4d5dec2c", "title": "Breaking Spotify DRM with PANDA", "url": "http://moyix.blogspot.com/2014/07/breaking-spotify-drm-with-panda.html", "published_at": "2014-07-03T17:25:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4dac54fe", "title": "PANDA, Reproducibility, and Open Science", "url": "http://moyix.blogspot.com/2014/01/panda-reproducibility-and-open-science.html", "published_at": "2014-01-28T16:29:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4e386e61", "title": "Prebuilt VM for PANDA Now Available", "url": "http://moyix.blogspot.com/2013/10/prebuilt-vm-for-panda-now-available.html", "published_at": "2013-10-04T18:36:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4f20f9c1", "title": "Announcing PANDA: A Platform for Architecture-Neutral Dynamic Analysis", "url": "http://moyix.blogspot.com/2013/09/announcing-panda-platform-for.html", "published_at": "2013-09-30T17:07:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d4fba32c6", "title": "Virtuoso – Initial Code Release", "url": "http://moyix.blogspot.com/2012/02/virtuoso-initial-code-release.html", "published_at": "2012-02-07T19:47:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d50239b10", "title": "What I Did on My Summer Vacation", "url": "http://moyix.blogspot.com/2011/09/what-i-did-on-my-summer-vacation.html", "published_at": "2011-09-06T17:34:00+00:00" }, { "id": "01a087a9-7e7f-73bd-bdd7-c20d5100cd85", "title": "Paper and Slides Available for \"Virtuoso: Narrowing the Semantic Gap in Virtual Machine Introspection\"", "url": "http://moyix.blogspot.com/2011/05/paper-and-slides-available-for-virtuoso.html", "published_at": "2011-05-28T07:34:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c7c2af39", "title": "Applying Forensic Tools to Virtual Machine Introspection", "url": "http://moyix.blogspot.com/2011/04/applying-forensic-tools-to-virtual.html", "published_at": "2011-04-06T21:36:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c7dacf29", "title": "Automatically Generating Memory Forensic Tools", "url": "http://moyix.blogspot.com/2011/03/automatically-generating-memory.html", "published_at": "2011-03-15T20:36:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c8893274", "title": "GDI Utilities: Taking Screenshots of Memory Dumps", "url": "http://moyix.blogspot.com/2010/07/gdi-utilities-taking-screenshots-of.html", "published_at": "2010-07-15T23:30:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c8b8a99c", "title": "Plugin Post: Robust Process Scanner", "url": "http://moyix.blogspot.com/2010/07/plugin-post-robust-process-scanner.html", "published_at": "2010-07-06T18:17:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c8bafcb3", "title": "SANS Forensic Summit: Thoughts and Slides", "url": "http://moyix.blogspot.com/2009/07/sans-forensic-summit-thoughts-and.html", "published_at": "2009-07-12T02:28:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c8c1ac1c", "title": "Odds and Ends", "url": "http://moyix.blogspot.com/2009/07/odds-and-ends.html", "published_at": "2009-07-01T13:50:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c8d03995", "title": "VolReg 0.6, now with BIG_DATA", "url": "http://moyix.blogspot.com/2009/06/volreg-06-now-with-bigdata.html", "published_at": "2009-06-08T13:16:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c9681efc", "title": "Windows 7 Registry Hives", "url": "http://moyix.blogspot.com/2009/06/windows-7-registry-hives.html", "published_at": "2009-06-06T17:28:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c96d6924", "title": "Comprehensive New Resource on the Windows Registry", "url": "http://moyix.blogspot.com/2009/05/comprehensive-new-resource-on-windows.html", "published_at": "2009-05-21T15:59:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c9d98336", "title": "Using Volatility for Introspection", "url": "http://moyix.blogspot.com/2009/03/using-volatility-for-introspection.html", "published_at": "2009-03-23T20:59:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c9daec61", "title": "Quick Response to Guidance", "url": "http://moyix.blogspot.com/2009/03/quick-response-to-guidance.html", "published_at": "2009-03-12T18:50:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17c9ef78bd", "title": "Updates and a New Home for Plugins", "url": "http://moyix.blogspot.com/2009/03/updates-and-new-home-for-plugins.html", "published_at": "2009-03-03T22:14:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17cab7ae9e", "title": "RegRipper and Volatility Prototype", "url": "http://moyix.blogspot.com/2009/03/regripper-and-volatility-prototype.html", "published_at": "2009-03-01T21:40:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17cb14761a", "title": "Teaser", "url": "http://moyix.blogspot.com/2009/02/teaser.html", "published_at": "2009-02-12T22:37:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17cba1b7a3", "title": "Registry Code Updates", "url": "http://moyix.blogspot.com/2009/01/registry-code-updates.html", "published_at": "2009-01-23T17:17:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17cc6b9136", "title": "Memory Registry Tools!", "url": "http://moyix.blogspot.com/2009/01/memory-registry-tools.html", "published_at": "2009-01-16T19:44:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17ccb55e76", "title": "Plugin Post: Moddump", "url": "http://moyix.blogspot.com/2008/10/plugin-post-moddump.html", "published_at": "2009-01-06T05:45:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17cdb38119", "title": "Window Messages as a Forensic Resource", "url": "http://moyix.blogspot.com/2008/09/window-messages-as-forensic-resource.html", "published_at": "2008-09-21T18:17:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17ce68d32d", "title": "Auditing the System Call Table", "url": "http://moyix.blogspot.com/2008/08/auditing-system-call-table.html", "published_at": "2008-08-20T22:48:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17cf2f9fd6", "title": "Introducing Volshell", "url": "http://moyix.blogspot.com/2008/08/indroducing-volshell.html", "published_at": "2008-08-17T21:48:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17cfeedd03", "title": "Linking Processes to Users", "url": "http://moyix.blogspot.com/2008/08/linking-processes-to-users.html", "published_at": "2008-08-16T22:20:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17d0889f3b", "title": "Volatility 1.3 is out!", "url": "http://moyix.blogspot.com/2008/08/volatility-13-is-out.html", "published_at": "2008-08-16T20:50:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17d0fde175", "title": "Sorry for the Hiatus!", "url": "http://moyix.blogspot.com/2008/08/sorry-for-hiatus.html", "published_at": "2008-08-15T21:30:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17d1af471d", "title": "Parsing Windows Minidumps", "url": "http://moyix.blogspot.com/2008/05/parsing-windows-minidumps.html", "published_at": "2008-05-08T02:51:00+00:00" }, { "id": "01a0bb9f-aac0-72ca-84e7-3e17d2600a05", "title": "DFRWS 2008 - Registry Forensics in Memory", "url": "http://moyix.blogspot.com/2008/05/dfrws-2008-registry-forensics-in-memory.html", "published_at": "2008-05-05T22:53:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1e792584d", "title": "Finding Kernel Global Variables in Windows", "url": "http://moyix.blogspot.com/2008/04/finding-kernel-global-variables-in.html", "published_at": "2008-04-16T21:03:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1e7ec0f76", "title": "Cell Index Translation", "url": "http://moyix.blogspot.com/2008/02/cell-index-translation.html", "published_at": "2008-02-26T23:43:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1e8c4c6fc", "title": "Cached Domain Credentials", "url": "http://moyix.blogspot.com/2008/02/cached-domain-credentials.html", "published_at": "2008-02-22T06:26:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1e934156b", "title": "Decrypting LSA Secrets", "url": "http://moyix.blogspot.com/2008/02/decrypting-lsa-secrets.html", "published_at": "2008-02-22T05:02:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1e9e801e1", "title": "SysKey and the SAM", "url": "http://moyix.blogspot.com/2008/02/syskey-and-sam.html", "published_at": "2008-02-22T04:45:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1ea85f4ff", "title": "CredDump: Extract Credentials from Windows Registry Hives", "url": "http://moyix.blogspot.com/2008/02/creddump-extract-credentials-from.html", "published_at": "2008-02-20T23:38:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1eb6b204c", "title": "Keys Open by Hive", "url": "http://moyix.blogspot.com/2008/02/keys-open-by-hive.html", "published_at": "2008-02-13T20:42:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1ec66bfc6", "title": "Reading Open Keys", "url": "http://moyix.blogspot.com/2008/02/reading-open-keys.html", "published_at": "2008-02-13T19:32:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1ecee6bf5", "title": "Enumerating Registry Hives", "url": "http://moyix.blogspot.com/2008/02/enumerating-registry-hives.html", "published_at": "2008-02-08T21:28:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1ed50690b", "title": "The Types Stream", "url": "http://moyix.blogspot.com/2007/10/types-stream.html", "published_at": "2007-10-04T17:08:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1ee39fca0", "title": "Administrativa", "url": "http://moyix.blogspot.com/2007/09/administrativa.html", "published_at": "2007-09-05T01:40:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1ee98a2e9", "title": "Challenges in Carving Registry Hives from Memory", "url": "http://moyix.blogspot.com/2007/09/challenges-in-carving-registry-hives.html", "published_at": "2007-09-04T17:38:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1ef3ca90e", "title": "PDB Stream Decomposition", "url": "http://moyix.blogspot.com/2007/08/pdb-stream-decomposition.html", "published_at": "2007-08-26T22:21:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1f02ec3f6", "title": "VAD Tools Posted", "url": "http://moyix.blogspot.com/2007/05/vad-tools-posted.html", "published_at": "2007-05-18T14:55:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1f036d06a", "title": "Oracle Forensics Articles", "url": "http://moyix.blogspot.com/2007/05/oracle-forensics-articles.html", "published_at": "2007-05-17T13:16:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1f04b8df8", "title": "Virtual Address Descriptors (DFRWS 2007)", "url": "http://moyix.blogspot.com/2007/05/virtual-address-descriptors-dfrws-2007.html", "published_at": "2007-05-07T15:10:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1f0f6efd3", "title": "Windows Memory Forensics, Part 1", "url": "http://moyix.blogspot.com/2007/01/windows-memory-forensics-part-1.html", "published_at": "2007-01-20T18:17:00+00:00" }, { "id": "01a0bba5-6dd8-73d3-a582-7fa1f1014a5e", "title": "Malware With a Twist", "url": "http://moyix.blogspot.com/2006/12/malware-with-twist.html", "published_at": "2006-12-30T01:02:00+00:00" } ] posts Claim your blog
Back to Push the Red Button
Blog · corpus.blog/blogs/moyix.blogspot.com/posts

Push the Red Button

moyix.blogspot.com

2022

Someone’s Been Messing With My Subnormals!original ↗
6 Sept 2022
On Building 30K Debian Packagesoriginal ↗
5 Feb 2022

2018

A couple ideas that went nowhereoriginal ↗
17 Oct 2018
Of Bugs and Baselinesoriginal ↗
20 Mar 2018

2016

NYC Area Security Folks – Come to SOS!original ↗
20 Oct 2016
The LAVA Synthetic Bug Corporaoriginal ↗
8 Oct 2016
Fuzzing with AFL is an Artoriginal ↗
21 Jul 2016
The Mechanics of Bug Injection with LAVAoriginal ↗
11 Jul 2016
How to add a million bugs to a program (and why you might want to)original ↗
7 Jun 2016
PANDA Plugin Documentationoriginal ↗
6 Jan 2016

2015

PANDA VM Update October 2015original ↗
2 Oct 2015
(Sys)Call Me Maybe: Exploring Malware Syscalls with PANDAoriginal ↗
27 Aug 2015
One Weird Trick to Shrink Your PANDA Malware Logs by 84%original ↗
24 Aug 2015
PANDA VM Update April 2015original ↗
13 Apr 2015
100 Days of Malwareoriginal ↗
24 Mar 2015

2014

Reproducible Malware Analyses for Alloriginal ↗
10 Dec 2014
Replaying Regin in PANDAoriginal ↗
26 Nov 2014
PANDA VM Updatedoriginal ↗
7 Oct 2014
Breaking Spotify DRM with PANDAoriginal ↗
3 Jul 2014
PANDA, Reproducibility, and Open Scienceoriginal ↗
28 Jan 2014

2013

Prebuilt VM for PANDA Now Availableoriginal ↗
4 Oct 2013
Announcing PANDA: A Platform for Architecture-Neutral Dynamic Analysisoriginal ↗
30 Sept 2013

2012

Virtuoso – Initial Code Releaseoriginal ↗
7 Feb 2012

2011

What I Did on My Summer Vacationoriginal ↗
6 Sept 2011
Paper and Slides Available for "Virtuoso: Narrowing the Semantic Gap in Virtual Machine Introspection"original ↗
28 May 2011
Applying Forensic Tools to Virtual Machine Introspectionoriginal ↗
6 Apr 2011
Automatically Generating Memory Forensic Toolsoriginal ↗
15 Mar 2011

2010

GDI Utilities: Taking Screenshots of Memory Dumpsoriginal ↗
15 Jul 2010
Plugin Post: Robust Process Scanneroriginal ↗
6 Jul 2010

2009

SANS Forensic Summit: Thoughts and Slidesoriginal ↗
12 Jul 2009
Odds and Endsoriginal ↗
1 Jul 2009
VolReg 0.6, now with BIG_DATAoriginal ↗
8 Jun 2009
Windows 7 Registry Hivesoriginal ↗
6 Jun 2009
Comprehensive New Resource on the Windows Registryoriginal ↗
21 May 2009
Using Volatility for Introspectionoriginal ↗
23 Mar 2009
Quick Response to Guidanceoriginal ↗
12 Mar 2009
Updates and a New Home for Pluginsoriginal ↗
3 Mar 2009
RegRipper and Volatility Prototypeoriginal ↗
1 Mar 2009
Teaseroriginal ↗
12 Feb 2009
Registry Code Updatesoriginal ↗
23 Jan 2009
Memory Registry Tools!original ↗
16 Jan 2009
Plugin Post: Moddumporiginal ↗
6 Jan 2009

2008

Window Messages as a Forensic Resourceoriginal ↗
21 Sept 2008
Auditing the System Call Tableoriginal ↗
20 Aug 2008
Introducing Volshelloriginal ↗
17 Aug 2008
Linking Processes to Usersoriginal ↗
16 Aug 2008
Volatility 1.3 is out!original ↗
16 Aug 2008
Sorry for the Hiatus!original ↗
15 Aug 2008
Parsing Windows Minidumpsoriginal ↗
8 May 2008
DFRWS 2008 - Registry Forensics in Memoryoriginal ↗
5 May 2008
Finding Kernel Global Variables in Windowsoriginal ↗
16 Apr 2008
Cell Index Translationoriginal ↗
26 Feb 2008
Cached Domain Credentialsoriginal ↗
22 Feb 2008
Decrypting LSA Secretsoriginal ↗
22 Feb 2008
SysKey and the SAMoriginal ↗
22 Feb 2008
CredDump: Extract Credentials from Windows Registry Hivesoriginal ↗
20 Feb 2008
Keys Open by Hiveoriginal ↗
13 Feb 2008
Reading Open Keysoriginal ↗
13 Feb 2008
Enumerating Registry Hivesoriginal ↗
8 Feb 2008

2007

The Types Streamoriginal ↗
4 Oct 2007
Administrativaoriginal ↗
5 Sept 2007
Challenges in Carving Registry Hives from Memoryoriginal ↗
4 Sept 2007
PDB Stream Decompositionoriginal ↗
26 Aug 2007
VAD Tools Postedoriginal ↗
18 May 2007
Oracle Forensics Articlesoriginal ↗
17 May 2007
Virtual Address Descriptors (DFRWS 2007)original ↗
7 May 2007
Windows Memory Forensics, Part 1original ↗
20 Jan 2007

2006

Malware With a Twistoriginal ↗
30 Dec 2006