Writing a Basic Maintenance Script in Python: Automating a Check Nobody Wants to Do ManuallySome of the most useful scripts in system administration aren't clever or complex, they're just the thing nobody wants to check manually, every day, forever. Disk space is a perfect example: running o6 min read·muhakeem.hashnode.dev4h ago
Four Attacks, One Tool: Reading the Story Packets TellA packet capture is just a recording, raw traffic, frozen in time, with no built-in explanation of what any of it means. This lab worked through four completely different network attack patterns, cred8 min read·muhakeem.hashnode.dev3d ago
Finding an Attacker in a Snapshot of Memory: RAM Forensics with Redline and VolatilityEvery disk-based forensic technique I'd worked through earlier in this series shared one limitation: a disk image only shows what was written to storage. A sophisticated attack often doesn't look like9 min read·muhakeem.hashnode.dev4d ago
Recovering a Deleted Partition: What's Really Lost When a Partition DisappearsDeleting a disk partition feels, to an attacker trying to cover their tracks, like a clean way to make an entire set of files disappear at once. One action, and a whole section of the disk, every file8 min read·muhakeem.hashnode.dev4d ago
File Carving: Recovering Files That No Longer Have a NameEvery recovery technique I'd worked through earlier in this forensics series depended on the file system still knowing something about the file in question, a deleted entry that could be found, a hash7 min read·muhakeem.hashnode.dev5d ago