CrowdStrike Inspect

CrowdStrike has several free utilities available at http://www.crowdstrike.com/community-tools/.  One example would be Crowd Inspect, an application that is a host-based process inspection tool utilizing multiple sources of information to detect untrusted or malicious network-active process.

PhotoDemon

PhotoDemon is a free portable image editor for Windows.

http://photodemon.org/

Using the “Run as different user” command prompt option with Windows 8.1/Windows Server 2012 R2

In versions prior to Windows 8.1, it was possible to hold down the Shift key while right-clicking the shortcut to a Command Prompt to find the option to launch using different credentials.  Using the new “Modern” interface with Windows 8.1/Windows Server 2012 R2, this option is not present.

One method to again use this feature is to add a shortcut to the Command Prompt to the task bar on the Desktop.  Using the old method of holding down the Shift key while right-clicking the shortcut should display the selection.

WizTree

WizTree is an utility that scans your entire hard drive and shows you which files and folders are using the most disk space.  It only works with local NTFS format hard drives.  A portable version is available for download.

http://antibody-software.com/

BlackArch Linux

BlackArch Linux is an Arch Linux-based distribution designed for penetration testers and security researchers.  It ships with over a thousand specialist tools for penetration testing and forensic analysis.

http://blackarch.org/

Compliance Checker for vSphere

The Compliance Checker for vSphere is a fully-functional product that provides detailed compliance checks against the VMware vSphere Hardening Guidelines.

http://www.vmware.com/products/vsphere-compliance-checker/

FakeNet

FakeNet is a tool that aids in the dynamic analysis of malicious software.  The tool simulates a network so that malware interacting with a remote host continues to run allowing the analyst to observe the malware’s network activity from within a safe environment.

http://practicalmalwareanalysis.com/fakenet/

How to check the status of BitLocker

To check the status of BitLocker, launch an elevated command prompt and use the command:

manage-bde –status

This command should return details such as the version number and the encryption type.

Lightweight Portable Security

Lightweight Portable Security (LPS) creates a secure end node from trusted media on almost any Intel-based computer (PC or Mac).  LPS boots a thin Linux operating system from a CD or USB flash stick without mounting a local hard drive.

http://www.spi.dod.mil/lipose.htm

BinaryTides

BinaryTides is a web site that contains how-to and walk-through articles for different topics for several different Linux distributions.

http://www.binarytides.com/