<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>IR and forensic talk &#187; analysis</title>
	<atom:link href="http://blog.kiddaland.net/tag/analysis/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.kiddaland.net</link>
	<description>Some useless talk mixed with hopefully interesting points every now and then</description>
	<lastBuildDate>Sat, 01 Oct 2011 01:06:05 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Timeline Analysis 201 &#8211; review the timeline</title>
		<link>http://blog.kiddaland.net/2011/02/timeline-analysis-201-review-the-timeline/</link>
		<comments>http://blog.kiddaland.net/2011/02/timeline-analysis-201-review-the-timeline/#comments</comments>
		<pubDate>Tue, 22 Feb 2011 10:06:15 +0000</pubDate>
		<dc:creator>kiddi</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Timeline analysis]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[csv]]></category>
		<category><![CDATA[excel]]></category>
		<category><![CDATA[log2timeline]]></category>
		<category><![CDATA[mactime]]></category>
		<category><![CDATA[sleuthkit]]></category>
		<category><![CDATA[timeline]]></category>

		<guid isPermaLink="false">http://blog.kiddaland.net/?p=302</guid>
		<description><![CDATA[In this second post in my short series of timeline analysis I&#8217;m going to discuss the use of the CSV output module.  In my previous post I discussed a bit about the different modules there are in log2timeline, at least the version that was released then, and the meaning of each entry within the mactime [...]]]></description>
		<wfw:commentRss>http://blog.kiddaland.net/2011/02/timeline-analysis-201-review-the-timeline/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Second Network Forensics Contest</title>
		<link>http://blog.kiddaland.net/2009/11/second-network-forensics-contest/</link>
		<comments>http://blog.kiddaland.net/2009/11/second-network-forensics-contest/#comments</comments>
		<pubDate>Mon, 23 Nov 2009 10:00:04 +0000</pubDate>
		<dc:creator>kiddi</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Network Analysis]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[artifact analysis]]></category>
		<category><![CDATA[artifacts]]></category>
		<category><![CDATA[contest]]></category>
		<category><![CDATA[extract from pcap]]></category>
		<category><![CDATA[network forensics]]></category>
		<category><![CDATA[pcap]]></category>
		<category><![CDATA[puzzle]]></category>

		<guid isPermaLink="false">http://blog.kiddaland.net/?p=151</guid>
		<description><![CDATA[I just wanted to go over my solution to the second network forensics contest. First of all a little disclaimer, since this is a competition where scripting is encouraged I decided beforehand to write a script and not rely on any available tools to complete this task (or at least to minimize usage of previous [...]]]></description>
		<wfw:commentRss>http://blog.kiddaland.net/2009/11/second-network-forensics-contest/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Malware analysis</title>
		<link>http://blog.kiddaland.net/2009/11/malware-analysis/</link>
		<comments>http://blog.kiddaland.net/2009/11/malware-analysis/#comments</comments>
		<pubDate>Thu, 19 Nov 2009 11:50:47 +0000</pubDate>
		<dc:creator>kiddi</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Windows Analysis]]></category>
		<category><![CDATA[analysis]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[pdf]]></category>

		<guid isPermaLink="false">http://blog.kiddaland.net/?p=158</guid>
		<description><![CDATA[I decided to to some malware analysis as a part of some presentation I had to do.  And since I went through the process, I decided to post it here if anyone is interested. To begin with, I needed to find some malware to analyze.  And a great place to find live links to active [...]]]></description>
		<wfw:commentRss>http://blog.kiddaland.net/2009/11/malware-analysis/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

