Hiroshi Suzuki

icon indicating a website link https://www.blackhat.com/us-21/training/schedule/index.html#a-comprehensive-guide-to-digital-forensics--malware-analysis-for-practical-incident-response-21866

icon company Internet Initiative Japan Inc. icon location A malware analyst, a forensic investigator, an incident responder, a researcher and a black hat speaker and trainer.

Results 5 issues of Hiroshi Suzuki

added a feature to collect pagefile.sys and swapfile.sys

updated auditpol plugin

It is to fix a bug for 2016 and add structures for 2012 and 2012R2.

Update BitsParser.py to fix a problem if a directory is passed as input

If a directory is passed with -i and --caveall, the -o option will overwrite the output file again and again. Therefore, all results except for the last one will be...

Supported IDA 9.0 for findcrypt.py and findguid.py

- findcrypt.py Since IDA 9.0 has removed SEARCH_* from idc, changed to use ida_search instead. - fincguid.py Since IDA 9.0 has removed ida_struct and find_binary on both idc and ida_search,...

Supported IDA 9.0

2 comment

- remove struct.hpp from ‎StdAfx.h if IDASDK_VERSION > 900 - I think you can completely delete it it does not use struct.hpp. - changed the output extension from .dlL to...