DIFF.BLOG
New Following Discover Jobs
More
Top Writers Suggest a blog Upvotes plugin
Report bug Contact About
Sign up
Topics
Follow your own topics →
Menu
New Following Discover Jobs Top Writers
More
Suggest a blog Upvotes plugin Report bug Contact About
Sign up
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS

Three NTFS bugs, one VHD file, and what your logs should already be telling you

33 · · Aug. 17, 2026, 7:36 a.m.
Security NTFS dfir Detection Engineering NTFS heap overflow VHD Files Digital Forensics
Summary
This blog post provides an analysis of three NTFS heap overflow vulnerabilities exploited via crafted VHD files. It includes detection methods and forensic artifacts to help in identifying such exploits, making it relevant for digital forensics and incident response (DFIR) practitioners.
Read full post on andreafortuna.org →
MORE POSTS LIKE THIS
DFIR from break glass to always-on: how incident response is becoming a permanent service
andreafortuna · May 11, 2026
dfir Security
security: Real world incident response: Microsoft and AXA XL strengthen cyber resilience
Sujith Quintelier · Jul 23, 2026
Cybersecurity Incident Response
Diamond chains and “GDIDs”: How this alleged Scattered Spider member got busted
Thestack · Jul 9, 2026
microsoft fbi
AIM: Building an Agentic Tier-2 SOC Analyst at Cisco Live AMER 2026
Blogs Cisco · Jul 7, 2026
Security AI
Sophisticated SilentCryptoMiner Variant Delivered via Fake Plugin Overlays
Securityonline · Jun 2, 2026
malware Crypto Mining Malware
Welcoming the Bhutanese Government to Have I Been Pwned
Troy Hunt · May 25, 2026
government Have I Been Pwned
Discover more posts →
AUTHOR
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub Continue with Google