1. « Brother UUIDs », or why UUIDs are not unique

    The RFC problem

    This is an actual problem in the RFC, that should be fixed one day, hopefully. Check out the « 4.1.1. Variant » section, applicable for RFC-compliant UUIDs, which defines the bits that indicate if an UUID is RFC-compliant.

    Obviously this serves no purpose (#tautology) since a non-compliant …

    read more
  2. Database creation

    In this article:

    • Why this database was created
    • What are the underlying technologies
    • Some early strategies and stories
    • Information on the collection scripts
    • Some « fun facts » about broken things

    Why this database was created

    Initially, I did some DFIR jobs at my previous employer. When doing forensics, specifically on Microsoft …

    read more