Real activity in the works… I have been working hard the past few months on writing and preparing a publication/white paper on the subject of data exfiltration and in specific using the RAR archive. This publication be made public and be released along side with a less technical KPMG Forensic Focus blog post on RAR exfil data recovery tactics. The publication I am proud to share will document the what seams to be undocumented RAR 1.0 schema. I must admit, with the timing of Home Depot going public with their announcement and Target, eBay, and Neiman Marcus still looming in the air, this could not be a more relevant time for this publication.