RE: Since we are on the subject of malware and hacking

[Ziots, Edward]

MY bad, sorry I have been way buried.

Also you can see my presentation and download the slide deck at the following 
location:

http://boston.naisg.org/archive.asp

Included video of the presentation and the slide deck.

Sincerely,
EZ

Edward E. Ziots, CISSP, CISA, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.org
Work:401-444-9081


This electronic message and any attachments may be privileged and confidential 
and protected from disclosure. If you are reading this message, but are not the 
intended recipient, nor an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that you are 
strictly prohibited from copying, printing, forwarding or otherwise 
disseminating this communication. If you have received this communication in 
error, please immediately notify the sender by replying to the message. Then, 
delete the message from your computer. Thank you.
[Description: Description: Lifespan]


From: Alan Davies [mailto:adav...@cls-services.com]
Sent: Tuesday, April 16, 2013 6:55 AM
To: NT System Admin Issues
Subject: RE: Since we are on the subject of malware and hacking

Sorry ... must pay attention and notice that some lists reply to individuals; 
some reply to the list!  Walking to naughty corner now ...



a

From: Alan Davies
Sent: 16 April 2013 11:54
To: 'NT System Admin Issues'
Subject: RE: Since we are on the subject of malware and hacking

Hi Edward, I'd be interested if you could send it over please.  Sorry for the 
late reply!




Cheers,


Alan Davies.

From: Ziots, Edward [mailto:ezi...@lifespan.org]
Sent: 21 March 2013 21:23
To: NT System Admin Issues
Subject: Since we are on the subject of malware and hacking

I just did a security presentation for NAISG Security Group last night which 
was well received and informative, it discusses incident response, malware 
analysis and traffic analysis of current malware trends so if you would like to 
have a copy of my presentation email me directly, and I will send you a copy.

Sincerely,
EZ

Edward E. Ziots, CISSP, CISA, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.org<mailto:ezi...@lifespan.org>
Work:401-444-9081


This electronic message and any attachments may be privileged and confidential 
and protected from disclosure. If you are reading this message, but are not the 
intended recipient, nor an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that you are 
strictly prohibited from copying, printing, forwarding or otherwise 
disseminating this communication. If you have received this communication in 
error, please immediately notify the sender by replying to the message. Then, 
delete the message from your computer. Thank you.
[Description: Description: Lifespan]



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin



WARNING:

The information in this email and any attachments is confidential and may be 
legally privileged.



If you are not the named addressee, you must not use, copy or disclose this 
email (including any attachments) or the information in it save to the named 
addressee nor take any action in reliance on it. If you receive this email or 
any attachments in error, please notify the sender immediately and then delete 
the same and any copies.



"CLS Services Ltd × Registered in England No 4132704 × Registered Office: 
Exchange Tower × One Harbour Exchange Square × London E14 9GE"



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>

RE: Since we are on the subject of malware and hacking

[Alan Davies]

Sorry ... must pay attention and notice that some lists reply to
individuals; some reply to the list!  Walking to naughty corner now ...

 

 

 

a

 

From: Alan Davies 
Sent: 16 April 2013 11:54
To: 'NT System Admin Issues'
Subject: RE: Since we are on the subject of malware and hacking

 

Hi Edward, I'd be interested if you could send it over please.  Sorry
for the late reply!

 

 

 

 

Cheers,

 

 

Alan Davies.

 

From: Ziots, Edward [mailto:ezi...@lifespan.org] 
Sent: 21 March 2013 21:23
To: NT System Admin Issues
Subject: Since we are on the subject of malware and hacking

 

I just did a security presentation for NAISG Security Group last night
which was well received and informative, it discusses incident response,
malware analysis and traffic analysis of current malware trends so if
you would like to have a copy of my presentation email me directly, and
I will send you a copy. 

 

Sincerely,

EZ

 

Edward E. Ziots, CISSP, CISA, Security +, Network +

Security Engineer

Lifespan Organization

ezi...@lifespan.org

Work:401-444-9081

 

 

This electronic message and any attachments may be privileged and
confidential and protected from disclosure. If you are reading this
message, but are not the intended recipient, nor an employee or agent
responsible for delivering this message to the intended recipient, you
are hereby notified that you are strictly prohibited from copying,
printing, forwarding or otherwise disseminating this communication. If
you have received this communication in error, please immediately notify
the sender by replying to the message. Then, delete the message from
your computer. Thank you.

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



WARNING:
The information in this email and any attachments is confidential and may be 
legally privileged.

If you are not the named addressee, you must not use, copy or disclose this 
email (including any attachments) or the information in it save to the named 
addressee nor take any action in reliance on it. If you receive this email or 
any attachments in error, please notify the sender immediately and then delete 
the same and any copies.

"CLS Services Ltd × Registered in England No 4132704 × Registered Office: 
Exchange Tower × One Harbour Exchange Square × London E14 9GE"


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>

RE: Since we are on the subject of malware and hacking

[Alan Davies]

Hi Edward, I'd be interested if you could send it over please.  Sorry
for the late reply!

 

 

 

 

Cheers,

 

 

Alan Davies.

 

From: Ziots, Edward [mailto:ezi...@lifespan.org] 
Sent: 21 March 2013 21:23
To: NT System Admin Issues
Subject: Since we are on the subject of malware and hacking

 

I just did a security presentation for NAISG Security Group last night
which was well received and informative, it discusses incident response,
malware analysis and traffic analysis of current malware trends so if
you would like to have a copy of my presentation email me directly, and
I will send you a copy. 

 

Sincerely,

EZ

 

Edward E. Ziots, CISSP, CISA, Security +, Network +

Security Engineer

Lifespan Organization

ezi...@lifespan.org

Work:401-444-9081

 

 

This electronic message and any attachments may be privileged and
confidential and protected from disclosure. If you are reading this
message, but are not the intended recipient, nor an employee or agent
responsible for delivering this message to the intended recipient, you
are hereby notified that you are strictly prohibited from copying,
printing, forwarding or otherwise disseminating this communication. If
you have received this communication in error, please immediately notify
the sender by replying to the message. Then, delete the message from
your computer. Thank you.

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



WARNING:
The information in this email and any attachments is confidential and may be 
legally privileged.

If you are not the named addressee, you must not use, copy or disclose this 
email (including any attachments) or the information in it save to the named 
addressee nor take any action in reliance on it. If you receive this email or 
any attachments in error, please notify the sender immediately and then delete 
the same and any copies.

"CLS Services Ltd × Registered in England No 4132704 × Registered Office: 
Exchange Tower × One Harbour Exchange Square × London E14 9GE"


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>

RE: Since we are on the subject of malware and hacking

[Ziots, Edward]

Surely glad to share… I am going to be starting a virtualization auditing and 
security presentation focusing on ESXi systems for presentation later on this 
yr. Should be a doosey but I need to do the research first.

Z

Edward E. Ziots, CISSP, CISA, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.org
Work:401-444-9081


This electronic message and any attachments may be privileged and confidential 
and protected from disclosure. If you are reading this message, but are not the 
intended recipient, nor an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that you are 
strictly prohibited from copying, printing, forwarding or otherwise 
disseminating this communication. If you have received this communication in 
error, please immediately notify the sender by replying to the message. Then, 
delete the message from your computer. Thank you.
[Description: Description: Lifespan]


From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Friday, March 22, 2013 1:12 PM
To: NT System Admin Issues
Subject: Re: Since we are on the subject of malware and hacking

Thank you sir. Much appreciated.

Kurt
On Thu, Mar 21, 2013 at 2:22 PM, Ziots, Edward 
mailto:ezi...@lifespan.org>> wrote:
I just did a security presentation for NAISG Security Group last night which 
was well received and informative, it discusses incident response, malware 
analysis and traffic analysis of current malware trends so if you would like to 
have a copy of my presentation email me directly, and I will send you a copy.

Sincerely,
EZ

Edward E. Ziots, CISSP, CISA, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.org<mailto:ezi...@lifespan.org>
Work:401-444-9081


This electronic message and any attachments may be privileged and confidential 
and protected from disclosure. If you are reading this message, but are not the 
intended recipient, nor an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that you are 
strictly prohibited from copying, printing, forwarding or otherwise 
disseminating this communication. If you have received this communication in 
error, please immediately notify the sender by replying to the message. Then, 
delete the message from your computer. Thank you.
[Description: Description: Lifespan]



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
<>

Re: Since we are on the subject of malware and hacking

[Kurt Buff]

Thank you sir. Much appreciated.

Kurt

On Thu, Mar 21, 2013 at 2:22 PM, Ziots, Edward  wrote:

>  I just did a security presentation for NAISG Security Group last night
> which was well received and informative, it discusses incident response,
> malware analysis and traffic analysis of current malware trends so if you
> would like to have a copy of my presentation email me directly, and I will
> send you a copy. 
>
> ** **
>
> Sincerely,
>
> EZ
>
> ** **
>
> Edward E. Ziots, CISSP, CISA, Security +, Network +
>
> Security Engineer
>
> Lifespan Organization
>
> ezi...@lifespan.org
>
> Work:401-444-9081
>
> ** **
>
> ** **
>
> This electronic message and any attachments may be privileged and
> confidential and protected from disclosure. If you are reading this
> message, but are not the intended recipient, nor an employee or agent
> responsible for delivering this message to the intended recipient, you are
> hereby notified that you are strictly prohibited from copying, printing,
> forwarding or otherwise disseminating this communication. If you have
> received this communication in error, please immediately notify the sender
> by replying to the message. Then, delete the message from your computer.
> Thank you.
>
> *[image: Description: Description: Lifespan]*
>
> ** **
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>

Re: Since we are on the subject of malware and hacking

[Andrew S. Baker]

Congrats, Z







*ASB
**http://XeeMe.com/AndrewBaker* *
**Providing Virtual CIO Services (IT Operations & Information Security) for
the SMB market…***





On Thu, Mar 21, 2013 at 5:22 PM, Ziots, Edward  wrote:

>  I just did a security presentation for NAISG Security Group last night
> which was well received and informative, it discusses incident response,
> malware analysis and traffic analysis of current malware trends so if you
> would like to have a copy of my presentation email me directly, and I will
> send you a copy. 
>
> ** **
>
> Sincerely,
>
> EZ
>
> ** **
>
> Edward E. Ziots, CISSP, CISA, Security +, Network +
>
> Security Engineer
>
> Lifespan Organization
>
> ezi...@lifespan.org
>
> Work:401-444-9081
>
> ** **
>
> ** **
>
> This electronic message and any attachments may be privileged and
> confidential and protected from disclosure. If you are reading this
> message, but are not the intended recipient, nor an employee or agent
> responsible for delivering this message to the intended recipient, you are
> hereby notified that you are strictly prohibited from copying, printing,
> forwarding or otherwise disseminating this communication. If you have
> received this communication in error, please immediately notify the sender
> by replying to the message. Then, delete the message from your computer.
> Thank you.
>
> *[image: Description: Description: Lifespan]*
>
> ** **
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>

RE: Since we are on the subject of malware and hacking

[Ziots, Edward]

Thanks Dave,

Next time I will show more of the packet level stuff I was finding, since its 
every day that I am looking and dealing with malware like I said there tends to 
be similarities. Especially lately has been multiple samples of postal receipt 
malware that is bypassing the AV filters.

Z

Edward E. Ziots, CISSP, CISA, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.org
Work:401-444-9081


This electronic message and any attachments may be privileged and confidential 
and protected from disclosure. If you are reading this message, but are not the 
intended recipient, nor an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that you are 
strictly prohibited from copying, printing, forwarding or otherwise 
disseminating this communication. If you have received this communication in 
error, please immediately notify the sender by replying to the message. Then, 
delete the message from your computer. Thank you.
[Description: Description: Lifespan]


From: Dave Vantine [mailto:dvant...@gmail.com]
Sent: Friday, March 22, 2013 8:07 AM
To: NT System Admin Issues
Subject: Re: Since we are on the subject of malware and hacking

It was a great presentation. Would have loved more of the examples you provided 
of what you were finding egressing through your firewall!
Regard
Dave
On Thu, Mar 21, 2013 at 5:22 PM, Ziots, Edward 
mailto:ezi...@lifespan.org>> wrote:
I just did a security presentation for NAISG Security Group last night which 
was well received and informative, it discusses incident response, malware 
analysis and traffic analysis of current malware trends so if you would like to 
have a copy of my presentation email me directly, and I will send you a copy.

Sincerely,
EZ

Edward E. Ziots, CISSP, CISA, Security +, Network +
Security Engineer
Lifespan Organization
ezi...@lifespan.org<mailto:ezi...@lifespan.org>
Work:401-444-9081


This electronic message and any attachments may be privileged and confidential 
and protected from disclosure. If you are reading this message, but are not the 
intended recipient, nor an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that you are 
strictly prohibited from copying, printing, forwarding or otherwise 
disseminating this communication. If you have received this communication in 
error, please immediately notify the sender by replying to the message. Then, 
delete the message from your computer. Thank you.
[Description: Description: Lifespan]



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin



--
Thanks
Dave Vantine

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>

Re: Since we are on the subject of malware and hacking

[Dave Vantine]

It was a great presentation. Would have loved more of the examples you
provided of what you were finding egressing through your firewall!
Regard
Dave
On Thu, Mar 21, 2013 at 5:22 PM, Ziots, Edward  wrote:

>  I just did a security presentation for NAISG Security Group last night
> which was well received and informative, it discusses incident response,
> malware analysis and traffic analysis of current malware trends so if you
> would like to have a copy of my presentation email me directly, and I will
> send you a copy. 
>
> ** **
>
> Sincerely,
>
> EZ
>
> ** **
>
> Edward E. Ziots, CISSP, CISA, Security +, Network +
>
> Security Engineer
>
> Lifespan Organization
>
> ezi...@lifespan.org
>
> Work:401-444-9081
>
> ** **
>
> ** **
>
> This electronic message and any attachments may be privileged and
> confidential and protected from disclosure. If you are reading this
> message, but are not the intended recipient, nor an employee or agent
> responsible for delivering this message to the intended recipient, you are
> hereby notified that you are strictly prohibited from copying, printing,
> forwarding or otherwise disseminating this communication. If you have
> received this communication in error, please immediately notify the sender
> by replying to the message. Then, delete the message from your computer.
> Thank you.
>
> *[image: Description: Description: Lifespan]*
>
> ** **
>
> ** **
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>



-- 
Thanks
Dave Vantine

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin<>