Overview: Evidence Collection of Ivanti Connected Secure Appliances

Users of Ivanti Connected Secure appliances are currently affected by several security flaws, several of which have been subject to in the wild exploitation in the past weeks.

Ivanti applied several security measures to harden their devices which affect the way forensic evidence can be collected. This article describes several methods discovered by security analysts that can be used to gather forensic evidence needed for a proper investigation.

Blog post authored by Dominic Helfer …

article can collection connected devices exploitation flaws forensic forensic evidence ivanti malware analysis security security flaws security measures