VM for ransomware investigations

 My laundry list of tools/software useful when investigating ransomware cases.

 

 Tor: Obviously need this to access Onion sites.

Transmission: Download leaked data from Torrent files.  

Peazip: Extract archives containing leaked data.  

LibreOffice: Read leaked documents. 

SSH: Transfer files from VM to host.  

 

Any suggestions what other tools you guys use? 

at No comments:
Labels: , , ,
Subscribe to: Posts (Atom)

VM for ransomware investigations

 My laundry list of tools/software useful when investigating ransomware cases.    Tor: Obviously need this to access Onion sites. Transmissi...

  • "An error occured in avast! engine: Invalid argument"
    This annoying message popped up after I ran the update in avast! in Ubuntu yesterday. avast! crashes every time I attempt to launch it after...
  • Zbot
    Downloaded a sample of "Zbot" from Offensive Computing's site . I'm no reverse engineering guru but decided to give it a ...