My best suggestion for Blue Teamers in an event such as CCDC is teamwork and preparation. Nothing beats practice.
It really depends on what you want it to do. But definitely check out Polypack @ http://polypack.eecs.umich.edu/
All *-ware removers are only halfway decent at their job, they try but it’s just too hard to keep up. So, normally I just reimage the machine. I keep pretty decent nLite scripts for each host I’ll need to set up.
Change directory into the “framework3” directory and run `svn up` that will update you to the latest SVN version. While this puts you on the cutting edge of updates to the framework, somethings may be broken, so always keep another copy of the framework a few revisions old.
“Deploy a cert for Firefox” does he mean install your CA’s cert in all your Firefox installs? There needs to be a bit more context to what you are trying to accomplish, sorry.
Please remember, this is not a podcast, we aren’t checking out a new tool, playing with it for a week, and then showing it off. Here are a list of our current projects though:
IPv6 Attacking
Trojans, RATs, and Malware
Fuzzing each layer of the OSI model
Adding features, and supplying patches to open source projects
Want a white paper put into perspective? Can't quite figure out how a tool or exploit works? or works into a pen test? Thats what we do, shoot a comment, tweet, facebook update our way and we'll feature it on a show. You can also post a question right here:
