Fun times !

In our forensics work, drawing a timeline of events to understand the sequence, challenge stakeholders on their version of the story or grasp the big picture is most often key.

Then with evidence pieces preserved in various corners of the planet and their intrinsic time entries reported in various standards (local time vs UTC time), translating time to a standard of reference is critical.

One of the online tools, timeanddate (ref #1), offers all the conversions, comparisons and views we can imagine to reach our goals, including a full interactive time zones map, shown below.

Current time in words

One of the views offered by timeanddate, mostly for fun, is the "Current time in words" for any city of your choice, here shown for Montreal.

It certainly is amusing, if not useful !

#time #fun #forensics

References

1. https://www.timeanddate.com/

Windows Subsystem for Linux (WSL) now supports GUI Linux programs

Here are some awesome news from the DFIR and offensive security trenches.

In case you haven’t tried yet, the Windows Subsystem for Linux (WSL) now supports GUI Linux programs displayed alongside other Windows apps.

This is absolutely fantastic for those of us who usually need to go back and forth between Linux and Windows during engagements, and deal with multiple full VMs, file transfers to centralize the data and wished all your favorite tools were all hosted under one single roof.

So wish no more!

Our quick example shows Linux Wireshark and Burp Suite (yes, they also exist in native versions for Windows) running graphically with other Windows apps, even with their own taskbar icons (Note #3), and using Linux internals (network interfaces, addressing scheme, proxy, file system, etc).

The rest is up to your imagination… 😎

Be safe and let’s keep up the fight!

#DFIR #WSL #LinuxOnWindows

References

• https://docs.microsoft.com/en-us/windows/wsl/tutorials/gui-apps

A new member for the Labs team (2022-06-14)

We have the pleasure to announce the arrival today of our new Labs team member: Iron.

It is still young and inexperienced, but we fully trust its potential for success, and its skills will greatly add to the Team's competence, flexibility and diversity.

After its rigorous training over the next few weeks, Iron will be sent to the battle front as a mobile computing operative.

Please join me as I welcome dearly and wish Iron the best!

JS

President

Welcome Iron !