Vietnam case studies
Ticket #1355: what is known and unknown about a NAS case
Read TUNGTEK's public NAS record through its evidence: received devices, attribution limits and missing data.
Tùng TEKNot independently verifiedForensic
Preserve evidence, cross-check timelines and assess the limitations of collected data.
Technical analysis
Do not identify a ransomware family from a file extension alone
Extensions and ransom notes are leads. Attribution requires comparable samples, behavior and timelines, with an explained confidence level.
Tùng TEKVerified
Forensic
Forensic timelines: reconstruct incidents from verifiable timestamps
Combine logs, metadata and storage artifacts into a sourced timeline while retaining gaps and clock discrepancies.
Tùng TEKVerified