Real activity in the works…  I have been working hard the past few months on writing and preparing a publication/white paper on the subject of data exfiltration and in specific using the RAR archive.  This publication be made public and be released along side with a less technical KPMG Forensic Focus blog post on RAR exfil data recovery tactics.  The publication I am proud to share will document the what seams to be undocumented RAR 1.0 schema.  I must admit, with the timing of Home Depot going public with their announcement and Target, eBay, and Neiman Marcus still looming in the air, this could not be a more relevant time for this publication.