Settings

Theme

To catch a hacker in my home lab

marcusedmondson.com

92 points by risk 4 years ago · 10 comments

Reader

jstanley 4 years ago

It might be worth explaining what an "artifact" is. I've tried searching but I can't find anything relevant.

  • nethunters 4 years ago

    An artifact is a term used in digital forensics to refer to any trace left on a system by an adversary. Examples are files, registry keys and event logs.

    • OneTimePetes 4 years ago

      Its also anything produced by a artistic production process e.g. in software- aka build-artifacts or documentation.

      As with all industries that are "birthed" by a mother-field software-security has overloaded the term inherited from its birth place industry.

      In this case, its the product produced by the investigation.

      • stan_rogers 4 years ago

        > Its also anything produced by a artistic production process e.g. in software- aka build-artifacts or documentation.

        You can drop "artistic" from that, as it comes with a connotation that doesn't necessarily apply. The first part of the term comes from the more general meaning of ars/art, which would nearly translate into English as "craft".

        • jaclaz 4 years ago

          If you follow the (Latin) origin it is even wider, in Italian artifact is artefatto where while the art (arte) part is as you say, the fatto comes from fare (Latin facere) which translate to "made".

          And we say "fatto ad arte" to mean that it is "intentionally made" i.e. artefatto is something that doesn't happen normally or naturally and/or does not exist in nature.

        • OneTimePetes 4 years ago

          So its basically "Crafted" thing? Thanks TIL.

    • didntknowya 4 years ago

      yea vastly different from a medical context where it's used to describe false positives or characteristics

  • bellyfullofbac 4 years ago

    Yeah, to judge from a writing point of view this is a terrible introduction. It links to a Github page with a 1 line readme although the paragraph itself says "There is a README file that has some question that can be answered based off the artifacts that are also on my Github." (That README is in a subdirectory in that git repo... I think?).

Keyboard Shortcuts

j
Next item
k
Previous item
o / Enter
Open selected item
?
Show this help
Esc
Close modal / clear selection