Michael Murr

Michael has been a forensic analyst with Code-X Technologies for over five years, has conducted numerous investigations and computer forensic examinations, and has performed specialized research and development. Michael has taught SEC504: Hacker Techniques, Exploits, and Incident Handling, FOR508: Computer Forensics, Investigation, and Response, and FOR610: Reverse-Engineering Malware; has led SANS Online Training courses and is a member of the GIAC Advisory Board. Currently, Michael is working on an open-source framework for developing digital forensics applications. Michael holds the GCIH, GCFA, and GREM certifications and has a degree in computer science from California State University at Channel Islands. Michael also blogs about digital forensics on his forensic computing blog.

More About Michael

Profile

ADDITIONAL CONTRIBUTIONS BY MIKE MURR:

BOOKS

Human Compromise: The Art of Social Engineering

MORECheck out Mike's blog.

Michael's Contributions

Writing Malware Reports

One of the more common questions that people ask in the FOR610 (reversing) class is about writing malware reports. Specifically what should go into a malware report? The Guiding Principle When I get asked this question my first response is usually "well why did you do the exam?" Besides potentially...

Associate Professor

September 18, 2009

Is Your index.dat File LEAKing?

One of the projects that I've been working on, has required me to become intimately familiar with index.dat files. These files (index.dat) are usually associated with Internet Explorer's browser history. If you've ever worked with index.dat files before, you've probably encountered the mysterious...

Associate Professor

February 27, 2009

Review of "Principles and Practice of Criminalistics"

One of my favorite forensics books is "Principles and Practice of Criminalistics: The Profession of Forensic Science". I feel the authors do an excellent job at providing a strong foundation for forensic science. The book is divided into three sections. The first section provides a brief history...

Associate Professor