Well what do you know - that day that I was talking about in my previous post? It was today: http://www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml Make sure you check out the MSR site in the coming days / weeks (hoping that by saying it like...

Edited 2/25/2005 to examine the multiple definitions of the word 'rootkit', added information on a LUA-friendly rootkit for the LUA folks to ponder (LUA - Limitted User Account), and added some thoughts on how they could mess with AV software. :) So this...

So yesterday this hilarious URL probably arrived in your inbox via your own personal friend network - and if it didn't, allow me to share it with you now (it's almost as entertaining as the Star Wars Kid ): http://www.microsoft.com/athome/security/children...

Wow - this is really really cool. So . . . select members of the MSRC are off at RSA this week doing BOOTH duty and talking to our customers and then blogging about the days events in an MSN web space - check it out! http://spaces.msn.com/members/msrc...

Interesting information from RSA, it's nice to see someone other than me notice the pure creamy goodness of WS2003 for once (I've noticed it from the incident response side of things by noting a marked absence of WS2003 hacking cases over the last 2 years...

Folks it just occured to me that I haven't formally introduced you to a colleague of mine, Tim Rains. Tim Rains is also a tech-lead on the PSS Security team and is an avid C++ coder (un-like me who despises the language). In fact Tim has a long and distinguished...