<br /> Digital<br /> The Quarterly Magazine for Digital Forensics Practitioners Issue 19 · May 2014<br /> WIN! a signed book<br /> ForensicS<br /> by Mark Osborne<br /> / magazine<br /> NTP DDOS<br /> DNS to NTP DDOS<br /> Conversion – Magic!<br /> How to convert a<br /> DNS DDOS program to<br /> an NTP DDOS program<br /> by changing a few lines<br /> of code…<br /> Latest News, 360<br /> Book Reviews, IRQ<br /> & much more inside!<br /> PLUS!<br /> Cyber Skills<br /> Xbox Tested<br /> Memory Forensics<br /> Analyze DI<br /> 19<br /> 9 772042 061004<br /> Issue 19 / £14.99 TR Media<br /> <br /> EDITORIAL<br /> W<br /> ell, it has certainly been a busy period since<br /> the last issue of Digital Foren<a title="DFM19 - Online page 1" href="http://viewer.zmags.com/publication/3e86d2e9?page=1"> Digital The Quarterly Magazine for Digital Fore</a> <a title="DFM19 - Online page 2" href="http://viewer.zmags.com/publication/3e86d2e9?page=2"> </a> <a title="DFM19 - Online page 3" href="http://viewer.zmags.com/publication/3e86d2e9?page=3"> EDITORIAL W </a> <a title="DFM19 - Online page 4" href="http://viewer.zmags.com/publication/3e86d2e9?page=4"> </a> <a title="DFM19 - Online page 5" href="http://viewer.zmags.com/publication/3e86d2e9?page=5"> 44 FEATURES 08 / What are the Core Skills for Cy</a> <a title="DFM19 - Online page 6" href="http://viewer.zmags.com/publication/3e86d2e9?page=6"> / NEWS NEWS NEWS / OpenSSL Vulnerability Cause</a> <a title="DFM19 - Online page 7" href="http://viewer.zmags.com/publication/3e86d2e9?page=7"> / NEWS ROUND-UP NATO WEBSITES SUFFER AS TENSION I</a> <a title="DFM19 - Online page 8" href="http://viewer.zmags.com/publication/3e86d2e9?page=8"> / FEATURE UNDERSTANDING CYBER SKILLS What are </a> <a title="DFM19 - Online page 9" href="http://viewer.zmags.com/publication/3e86d2e9?page=9"> CESG Certified Professional (CCP) Scheme. A scheme</a> <a title="DFM19 - Online page 10" href="http://viewer.zmags.com/publication/3e86d2e9?page=10"> / FEATURE One of the key aspects of decon</a> <a title="DFM19 - Online page 11" href="http://viewer.zmags.com/publication/3e86d2e9?page=11"> No. Core Subject Indicative Con</a> <a title="DFM19 - Online page 12" href="http://viewer.zmags.com/publication/3e86d2e9?page=12"> / FEATURE Figure 4.</a> <a title="DFM19 - Online page 13" href="http://viewer.zmags.com/publication/3e86d2e9?page=13"> </a> <a title="DFM19 - Online page 14" href="http://viewer.zmags.com/publication/3e86d2e9?page=14"> / LEAD FEATURE NTP DDOS Converting a DNS DDOS pro</a> <a title="DFM19 - Online page 15" href="http://viewer.zmags.com/publication/3e86d2e9?page=15"> / The Magic Formula To generate a successful ampl</a> <a title="DFM19 - Online page 16" href="http://viewer.zmags.com/publication/3e86d2e9?page=16"> / LEAD FEATURE Clearly this meets the cr</a> <a title="DFM19 - Online page 17" href="http://viewer.zmags.com/publication/3e86d2e9?page=17"> / Internet Control Message Protocol ICMP is on</a> <a title="DFM19 - Online page 18" href="http://viewer.zmags.com/publication/3e86d2e9?page=18"> </a> <a title="DFM19 - Online page 19" href="http://viewer.zmags.com/publication/3e86d2e9?page=19"> / LEGAL EDITORIAL LEGAL EDITORIAL Target, Trustwa</a> <a title="DFM19 - Online page 20" href="http://viewer.zmags.com/publication/3e86d2e9?page=20"> / LEGAL FEATURE HORIZON 2020 The EU's efforts </a> <a title="DFM19 - Online page 21" href="http://viewer.zmags.com/publication/3e86d2e9?page=21"> However, if the goal of Call 1 is successfu</a> <a title="DFM19 - Online page 22" href="http://viewer.zmags.com/publication/3e86d2e9?page=22"> / LEGAL FEATURE HIGH-SPEED CONNECTIONS AMONG DE</a> <a title="DFM19 - Online page 23" href="http://viewer.zmags.com/publication/3e86d2e9?page=23"> item is for participating entities to enhance the</a> <a title="DFM19 - Online page 24" href="http://viewer.zmags.com/publication/3e86d2e9?page=24"> / LEGAL EDITORIAL LEGAL NEWS A round-up of the la</a> <a title="DFM19 - Online page 25" href="http://viewer.zmags.com/publication/3e86d2e9?page=25"> </a> <a title="DFM19 - Online page 26" href="http://viewer.zmags.com/publication/3e86d2e9?page=26"> / FEATURE SESSION SPOOFING ATTEMPTS ON THE XBO</a> <a title="DFM19 - Online page 27" href="http://viewer.zmags.com/publication/3e86d2e9?page=27"> the applications, and the actual games and on the</a> <a title="DFM19 - Online page 28" href="http://viewer.zmags.com/publication/3e86d2e9?page=28"> / FEATURE related to the act of logging into </a> <a title="DFM19 - Online page 29" href="http://viewer.zmags.com/publication/3e86d2e9?page=29"> in this case, image files. While revealing the ful</a> <a title="DFM19 - Online page 30" href="http://viewer.zmags.com/publication/3e86d2e9?page=30"> / FEATURE the PC version of Internet Explorer</a> <a title="DFM19 - Online page 31" href="http://viewer.zmags.com/publication/3e86d2e9?page=31"> </a> <a title="DFM19 - Online page 32" href="http://viewer.zmags.com/publication/3e86d2e9?page=32"> / FEATURE MEMORY FORENSICS Haider M. al-Khatee</a> <a title="DFM19 - Online page 33" href="http://viewer.zmags.com/publication/3e86d2e9?page=33"> subtitled within the Kernel Memory refers to the </a> <a title="DFM19 - Online page 34" href="http://viewer.zmags.com/publication/3e86d2e9?page=34"> / FEATURE / Significance Of The Volat le Me</a> <a title="DFM19 - Online page 35" href="http://viewer.zmags.com/publication/3e86d2e9?page=35"> In addition to using third-party tools to cap</a> <a title="DFM19 - Online page 36" href="http://viewer.zmags.com/publication/3e86d2e9?page=36"> / FEATURE and 0x8ccac9c8 accordingly. Now tha</a> <a title="DFM19 - Online page 37" href="http://viewer.zmags.com/publication/3e86d2e9?page=37"> </a> <a title="DFM19 - Online page 38" href="http://viewer.zmags.com/publication/3e86d2e9?page=38"> / FEATURE THE SHATTERED PROJECT A FORENSIC UND</a> <a title="DFM19 - Online page 39" href="http://viewer.zmags.com/publication/3e86d2e9?page=39"> searches, and directions. All of this displayed d</a> <a title="DFM19 - Online page 40" href="http://viewer.zmags.com/publication/3e86d2e9?page=40"> / FEATURE end of every searc</a> <a title="DFM19 - Online page 41" href="http://viewer.zmags.com/publication/3e86d2e9?page=41"> Location results plotted on a map read at a seri</a> <a title="DFM19 - Online page 42" href="http://viewer.zmags.com/publication/3e86d2e9?page=42"> / ADVERTORIAL CYBER SECURITY, ACADEMIA AND INDUST</a> <a title="DFM19 - Online page 43" href="http://viewer.zmags.com/publication/3e86d2e9?page=43"> 43</a> <a title="DFM19 - Online page 44" href="http://viewer.zmags.com/publication/3e86d2e9?page=44"> / FEATURE MOBILE PHONES AND TEEN DATING VIOLEN</a> <a title="DFM19 - Online page 45" href="http://viewer.zmags.com/publication/3e86d2e9?page=45"> / Pew Research Centre The Pew Research Centre is </a> <a title="DFM19 - Online page 46" href="http://viewer.zmags.com/publication/3e86d2e9?page=46"> / FEATURE professionals need to be concerned </a> <a title="DFM19 - Online page 47" href="http://viewer.zmags.com/publication/3e86d2e9?page=47"> </a> <a title="DFM19 - Online page 48" href="http://viewer.zmags.com/publication/3e86d2e9?page=48"> / INTERVIEW MEET THE PROFESSIONALS / Mark Osb</a> <a title="DFM19 - Online page 49" href="http://viewer.zmags.com/publication/3e86d2e9?page=49"> I look at these and see no place for me, or most </a> <a title="DFM19 - Online page 50" href="http://viewer.zmags.com/publication/3e86d2e9?page=50"> / INTERVIEW / CAREER Mark's career in Informati</a> <a title="DFM19 - Online page 51" href="http://viewer.zmags.com/publication/3e86d2e9?page=51"> / GET INVOLVED GET INVOLVED Calling all Book Revi</a> <a title="DFM19 - Online page 52" href="http://viewer.zmags.com/publication/3e86d2e9?page=52"> Digital ForensicS / magazine The Quarterly Mag</a> <a title="DFM19 - Online page 53" href="http://viewer.zmags.com/publication/3e86d2e9?page=53"> PROGRAMMING THE WETWARE Keith Scott investigates </a> <a title="DFM19 - Online page 54" href="http://viewer.zmags.com/publication/3e86d2e9?page=54"> / FEATURE He qualifies his statement: “T</a> <a title="DFM19 - Online page 55" href="http://viewer.zmags.com/publication/3e86d2e9?page=55"> More important than economic influences are </a> <a title="DFM19 - Online page 56" href="http://viewer.zmags.com/publication/3e86d2e9?page=56"> / FEATURE about jihad, we do not want the firs</a> <a title="DFM19 - Online page 57" href="http://viewer.zmags.com/publication/3e86d2e9?page=57"> 36 Letters, emails, tweets, connections and more…</a> <a title="DFM19 - Online page 58" href="http://viewer.zmags.com/publication/3e86d2e9?page=58"> </a> <a title="DFM19 - Online page 59" href="http://viewer.zmags.com/publication/3e86d2e9?page=59"> / FEATURE CYBERPLAYBOOK Paul Nguyen explains h</a> <a title="DFM19 - Online page 60" href="http://viewer.zmags.com/publication/3e86d2e9?page=60"> / FEATURE / Skilled Worker Shortage The lack of </a> <a title="DFM19 - Online page 61" href="http://viewer.zmags.com/publication/3e86d2e9?page=61"> · According to a May 2013 Forrester paper en</a> <a title="DFM19 - Online page 62" href="http://viewer.zmags.com/publication/3e86d2e9?page=62"> / FEATURE Figure </a> <a title="DFM19 - Online page 63" href="http://viewer.zmags.com/publication/3e86d2e9?page=63"> / COMING SOON COMING SOON… A round-up of featu</a> <a title="DFM19 - Online page 64" href="http://viewer.zmags.com/publication/3e86d2e9?page=64"> / FROM THE LAB THE CHANGING FACE OF DIGITAL FO</a> <a title="DFM19 - Online page 65" href="http://viewer.zmags.com/publication/3e86d2e9?page=65"> During the investigation of crimes like terro</a> <a title="DFM19 - Online page 66" href="http://viewer.zmags.com/publication/3e86d2e9?page=66"> / FROM THE LAB / Data Freedom The ICAC (Interne</a> <a title="DFM19 - Online page 67" href="http://viewer.zmags.com/publication/3e86d2e9?page=67"> is still a daunting number, but using the review </a> <a title="DFM19 - Online page 68" href="http://viewer.zmags.com/publication/3e86d2e9?page=68"> / FROM THE LAB / TOP FACT The number of police </a> <a title="DFM19 - Online page 69" href="http://viewer.zmags.com/publication/3e86d2e9?page=69"> / COMPETITION COMPETITION / This issue we have</a> <a title="DFM19 - Online page 70" href="http://viewer.zmags.com/publication/3e86d2e9?page=70"> / FEATURE CYBER FORENSICS – INCIDENT RESPONSE </a> <a title="DFM19 - Online page 71" href="http://viewer.zmags.com/publication/3e86d2e9?page=71"> IT IS ABSOLUTELY ESSENTIAL THAT THE PRACTI</a> <a title="DFM19 - Online page 72" href="http://viewer.zmags.com/publication/3e86d2e9?page=72"> / FEATURE [Playbooks] can represent critical </a> <a title="DFM19 - Online page 73" href="http://viewer.zmags.com/publication/3e86d2e9?page=73"> mission of technological engagement, acquisition </a> <a title="DFM19 - Online page 74" href="http://viewer.zmags.com/publication/3e86d2e9?page=74"> / FEATURE USING WATERMARKS TO PROTECT INTELLEC</a> <a title="DFM19 - Online page 75" href="http://viewer.zmags.com/publication/3e86d2e9?page=75"> complex topics, oversimplifications, over- general</a> <a title="DFM19 - Online page 76" href="http://viewer.zmags.com/publication/3e86d2e9?page=76"> / FEATURE Original image </a> <a title="DFM19 - Online page 77" href="http://viewer.zmags.com/publication/3e86d2e9?page=77"> / Review of Results Trust is the key element miss</a> <a title="DFM19 - Online page 78" href="http://viewer.zmags.com/publication/3e86d2e9?page=78"> / book reviews BOOK REVIEWS CYBERATTACK, CYBERCRI</a> <a title="DFM19 - Online page 79" href="http://viewer.zmags.com/publication/3e86d2e9?page=79"> THE STRENGTH AND, AT THE SAME TIME, ONE OF</a> <a title="DFM19 - Online page 80" href="http://viewer.zmags.com/publication/3e86d2e9?page=80"> / book reviews T his is an encyc</a> <a title="DFM19 - Online page 81" href="http://viewer.zmags.com/publication/3e86d2e9?page=81"> </a> <a title="DFM19 - Online page 82" href="http://viewer.zmags.com/publication/3e86d2e9?page=82"> / IRQ IRQ Cross Examination or Negotiation? O </a> <a title="DFM19 - Online page 83" href="http://viewer.zmags.com/publication/3e86d2e9?page=83"> </a> <a title="DFM19 - Online page 84" href="http://viewer.zmags.com/publication/3e86d2e9?page=84"> </a>