Threat actors are using a forensic tool's Windows kernel driver to kill security products, despite the fact the driver's digital certificate was revoked more than a decade ago. In a blog post ...

Attackers abused a signed but long-revoked EnCase Windows kernel driver in a BYOVD attack to terminate all security tools. In a recent incident, attackers abused a legitimate but vulnerable Windows ...

Hackers are abusing a legitimate but long-revoked EnCase kernel driver in an EDR killer that can detect 59 security tools in attempts to deactivate them. An EDR killer is a malicious tool created ...

The Africa Program achieves its mission through in-depth research that offers practical solutions to key challenges in US-Africa relations. The Africa Program's flagship initiatives include the ...

OpenText is a rare deep value stock in the Technology Sector and Software industry. Following a transformative acquisition of UK based Microfocus the stock dropped as the company integrated the ...

EnCase App Central is first online marketplace for digital investigation apps; Company also releases EnCase software development kit (SDK) to support software developers of EnScript applications ...

Guidance Software Inc.'s EnCase Enterprise Edition Version 4.16 provides the first enterprise solution that allows computer incident response teams (CIRT) and information investigators the ability to ...

It’s a sad fact that many a network manager will skip this review. This in spite of Sarbanes-Oxley, HIPAA, and Gramm-Leach-Bliley. This in spite of identity theft, corporate espionage, and a bucket ...