Blog posts

New year, new site I have decided to merge my old sites blog.dfir.fi and dfir.fi into one page. I will also be posting about the DFIR-FI community, news about my new training courses, maintaining my …

[0x8] Log4shell memos

By whois

December 18, 2021 | 10 min read

Image source: Kevin Beaumont, Twitter On Friday 10th of December 2021, internet was set on fire. Or technically internet was full of flammable material and someone shared matches to everyone on that …

[0x7] Migration to Github

By whois

September 23, 2021 | One minute read

I’ve decided to change my blog from self-hosted jekyll site to auto deployed Github hugo page. Because of this, my blog’s RSS feed will also change. You can find the new RSS link from footer. I will …

[0x6] Cyber Security Essentials CTF

By whois

July 23, 2020 | 25 min read

Cyber Security Essentials is a course series I was organizing in HelSec with Future Female. CSE had 6 lectures and the CTF was organized at the end of the course. The course was aimed for female who …

[0x5] Phishing MFA accounts

By whois

July 22, 2020 | 3 min read

MFA is usually considered secure. It however can be bypassed by phishing. I made this phishing demo using drk1wi’s tool Modlishka. The tool default templates are little bit outdated so …

[0x4] Installing RegRipper on Linux

By whois

February 19, 2020 | 3 min read

RegRipper is a tool made by H. Carvey (keydet89) for Windows registry analysis. The tool is perl script that is made to run on Windows. The tool can be installed on Linux distros but I haven’t …

[0x3] Disobey 2020 puzzle writeup

By whois

December 23, 2019 | 20 min read

Disobey is a Finnish hacker/cyber security conference. They release every year a hacker challenge and 50 first who solve it, get to buy the special “hacker ticket” with a cheaper price …

[0x2] Late wedding gift

By whois

July 7, 2019 | 6 min read

This is kinda old story but I wanted to share it with you as I find it somewhat funny. Sadly now, when I finally had spare time to spend with the document, the host it tries to connect is down. …

[0x1] SANS 2019 & BSides Orlando

By whois

April 18, 2019 | 6 min read

Few weeks ago I left cold Finland and headed to Orlando to attend SANS FOR610 (Reverse-Engineering Malware). After signing up and buying flight tickets, I noticed that BSides Orlando was held just …

[0x0] Hello World!

By whois

April 14, 2019 | One minute read

I decided to start blogging because I suck at remembering stuff -> If I write it publicly down, I will most likely remember it There’s no DFIR blogs in Finland (at least I don’t know of …