Forensic Memory Analysis for Apple OS X

Analysis of raw memory dumps has become a critical capability in digital forensics because it gives insight into the state of a system that cannot be fully represented through traditional disk analysis. Interest in memory forensics has grown steadily in recent years, with a focus on the Microsoft Windows operating systems. However, similar capabilities for Linux and Apple OS X have lagged by comparison. The volafox open source project has begun work on structured memory analysis for OS X. The tool currently supports a limited set of kernel structures to parse hardware information, system build number, process listing, loaded kernel modules, syscall table, and socket connections. This research addresses one memory analysis deficiency on OS X by introducing a new volafox module for parsing file handles. When open files are mapped to a process, an examiner can learn which resources the process is accessing on disk. This listing is useful for determining what information may have been the target for exfilitration or modification on a compromised system. Comparing output of the developed module and the UNIX lsof (list open files) command on two version of OS X and two kernel architectures validates the methodology used to extract file handle information

Acquiring OS X File Handles through Forensic Memory Analysis

Memory analysis has become a critical capability in digital forensics because it provides insight into system state that cannot be fully represented through traditional media analysis. The volafox open source project has begun the work of structured memory analysis for OS X with support for a limited set of kernel structures. This paper addresses one memory analysis deficiency on OS X with the introduction of a new volafox module for parsing file handles associated with running processes. The developed module outputs information comparable to the UNIX lsof (list open files) command, which is used to validate the results

Interaction of Cryptococcus neoformans Rim101 and Protein Kinase A Regulates Capsule

Cryptococcus neoformans is a prevalent human fungal pathogen that must survive within various tissues in order to establish a human infection. We have identified the C. neoformans Rim101 transcription factor, a highly conserved pH-response regulator in many fungal species. The rim101Δ mutant strain displays growth defects similar to other fungal species in the presence of alkaline pH, increased salt concentrations, and iron limitation. However, the rim101Δ strain is also characterized by a striking defect in capsule, an important virulence-associated phenotype. This capsular defect is likely due to alterations in polysaccharide attachment to the cell surface, not in polysaccharide biosynthesis. In contrast to many other C. neoformans capsule-defective strains, the rim101Δ mutant is hypervirulent in animal models of cryptococcosis. Whereas Rim101 activation in other fungal species occurs through the conserved Rim pathway, we demonstrate that C. neoformans Rim101 is also activated by the cAMP/PKA pathway. We report here that C. neoformans uses PKA and the Rim pathway to regulate the localization, activation, and processing of the Rim101 transcription factor. We also demonstrate specific host-relevant activating conditions for Rim101 cleavage, showing that C. neoformans has co-opted conserved signaling pathways to respond to the specific niche within the infected host. These results establish a novel mechanism for Rim101 activation and the integration of two conserved signaling cascades in response to host environmental conditions

A case study analysis of the impact of a new free tropospheric turbulence scheme on the dispersion of an atmospheric tracer

Most Lagrangian dispersion models represent free tropospheric turbulence as a homogeneous steady-state process. However, intermittent turbulent mixing in the free troposphere may be a significant source of mixing. We test anew parametrization scheme that represents spatial- and temporal-varying turbulence in the free troposphere in the Met Office’s Numerical Atmospheric-dispersion Modelling Environment. We use semi-idealized emissions of radon-222 (222Rn) from rocks and soil in the United Kingdom to evaluate the impact of using a variable free tropospheric turbulence parameterization on the dispersion of 222Rn. We performed two experiments, the first using the existing steady-state scheme and the second using the newly implemented spatio-temporal-varying scheme, for two case periods July 2018 and April 2021. We find that the turbulence in the varying scheme (represented by the vertical velocity variance) can range by two to three orders of magnitude (10−4to 10−1 m2 s−2) when compared with the steady-state scheme(10−2 m2 s−2). In particular, low-altitude turbulence is enhanced when synoptic conditions are conducive to forming low-level jets. This leads to a greater dispersion in the free troposphere, reducing the mean monthly 222Rn concentration above the boundary layer by 20–40% relative to the steady-state scheme. We conclude that without a space–time-varying free tropospheric turbulence scheme atmospheric dispersion may be significantly underestimated under synoptic conditions that are favourable for low-level jet formation. This underestimation of dispersion may potentially result in inaccurate estimations of local emissions in top-down greenhouse gas inventory studies

SUMO chain formation is required for response to replication arrest in S. pombe

SUMO is a ubiquitin-like protein that is post-translationally attached to one or more lysine residues on target proteins. Despite having only 18% sequence identity with ubiquitin, SUMO contains the conserved betabetaalphabetabetaalphabeta fold present in ubiquitin. However, SUMO differs from ubiquitin in having an extended N-terminus. In S. pombe the N-terminus of SUMO/Pmt3 is significantly longer than those of SUMO in S. cerevisiae, human and Drosophila. Here we investigate the role of this N-terminal region. We have used two dimensional gel electrophoresis to demonstrate that S. pombe SUMO/Pmt3 is phosphorylated, and that this occurs on serine residues at the extreme N-terminus of the protein. Mutation of these residues (in pmt3-1) results in a dramatic reduction in both the levels of high Mr SUMO-containing species and of total SUMO/Pmt3, indicating that phosphorylation of SUMO/Pmt3 is required for its stability. Despite the significant reduction in high Mr SUMO-containing species, pmt3-1 cells do not display an aberrant cell morphology or sensitivity to genotoxins or stress. Additionally, we demonstrate that two lysine residues in the N-terminus of S. pombe SUMO/Pmt3 (K14 and K30) can act as acceptor sites for SUMO chain formation in vitro. Inability to form SUMO chains results in aberrant cell and nuclear morphologies, including stretched and fragmented chromatin. SUMO chain mutants are sensitive to the DNA synthesis inhibitor, hydroxyurea (HU), but not to other genotoxins, such as UV, MMS or CPT. This implies a role for SUMO chains in the response to replication arrest in S. pomb

Characterization of Antibodies against Receptor Activity-Modifying Protein 1 (RAMP1): A Cautionary Tale

Calcitonin gene-related peptide (CGRP) is a key component of migraine pathophysiology, yielding effective migraine therapeutics. CGRP receptors contain a core accessory protein subunit: receptor activity-modifying protein 1 (RAMP1). Understanding of RAMP1 expression is incomplete, partly due to the challenges in identifying specific and validated antibody tools. We profiled antibodies for immunodetection of RAMP1 using Western blotting, immunocytochemistry and immunohistochemistry, including using RAMP1 knockout mouse tissue. Most antibodies could detect RAMP1 in Western blotting and immunocytochemistry using transfected cells. Two antibodies (844, ab256575) could detect a RAMP1-like band in Western blots of rodent brain but not RAMP1 knockout mice. However, cross-reactivity with other proteins was evident for all antibodies. This cross-reactivity prevented clear conclusions about RAMP1 anatomical localization, as each antibody detected a distinct pattern of immunoreactivity in rodent brain. We cannot confidently attribute immunoreactivity produced by RAMP1 antibodies (including 844) to the presence of RAMP1 protein in immunohistochemical applications in brain tissue. RAMP1 expression in brain and other tissues therefore needs to be revisited using RAMP1 antibodies that have been comprehensively validated using multiple strategies to establish multiple lines of convincing evidence. As RAMP1 is important for other GPCR/ligand pairings, our results have broader significance beyond the CGRP field

Solid variant of aneurysmal bone cyst of the thoracic spine: a case report

<p>Abstract</p> <p>Introduction</p> <p>The solid variant of aneurysmal bone cyst is rare, and only 13 cases involving the spine have been reported to date, including seven in the thoracic vertebrae. The diagnosis is difficult to secure radiographically before biopsy or surgery.</p> <p>Case report</p> <p>An 18-year-old Hispanic man presented to our facility with a one-year history of left chest pain without any significant neurological deficits. An MRI scan demonstrated a 6 cm diameter enhancing multi-cystic mass centered at the T6 vertebral body with involvement of the left proximal sixth rib and extension into the pleural cavity; the spinal cord was severely compressed with evidence of abnormal T2 signal changes. Our patient was taken to the operating room for a total spondylectomy of T6 with resection of the left sixth rib from a single-stage posterior-only approach. The vertebral column was reconstructed in a 360° manner with an expandable titanium cage and pedicle screw fixation. Histologically, the resected specimen showed predominant solid fibroblastic proliferation, with minor foci of reactive osteoid formation, an area of osteoclastic-like giant cells, and cyst-like areas filled with erythrocytes and focal hemorrhage, consistent with a predominantly solid variant of aneurysmal bone cyst. At 16 months after surgery, our patient remains neurologically intact with resolution of his chest and back pain.</p> <p>Conclusions</p> <p>Because of its rarity, location, and radical treatment approach, we considered this case worthy of reporting. The solid variant of aneurysmal bone cyst is difficult to diagnose radiologically before biopsy or surgery, and we hope to remind other physicians that it should be included in the differential diagnosis of any lytic expansile destructive lesion of the spine.</p

Vectorial capacity and vector control: reconsidering sensitivity to parameters for malaria elimination

Background: Major gains have been made in reducing malaria transmission in many parts of the world, principally by scaling-up coverage with long-lasting insecticidal nets and indoor residual spraying. Historically, choice of vector control intervention has been largely guided by a parameter sensitivity analysis of George Macdonald's theory of vectorial capacity that suggested prioritizing methods that kill adult mosquitoes. While this advice has been highly successful for transmission suppression, there is a need to revisit these arguments as policymakers in certain areas consider which combinations of interventions are required to eliminate malaria.Methods and Results: Using analytical solutions to updated equations for vectorial capacity we build on previous work to show that, while adult killing methods can be highly effective under many circumstances, other vector control methods are frequently required to fill effective coverage gaps. These can arise due to pre-existing or developing mosquito physiological and behavioral refractoriness but also due to additive changes in the relative importance of different vector species for transmission. Furthermore, the optimal combination of interventions will depend on the operational constraints and costs associated with reaching high coverage levels with each intervention.Conclusions: Reaching specific policy goals, such as elimination, in defined contexts requires increasingly non-generic advice from modelling. Our results emphasize the importance of measuring baseline epidemiology, intervention coverage, vector ecology and program operational constraints in predicting expected outcomes with different combinations of interventions.<br/

Patient-centric trials for therapeutic development in precision oncology

An enhanced understanding of the molecular pathology of disease gained from genomic studies is facilitating the development of treatments that target discrete molecular subclasses of tumours. Considerable associated challenges include how to advance and implement targeted drug-development strategies. Precision medicine centres on delivering the most appropriate therapy to a patient on the basis of clinical and molecular features of their disease. The development of therapeutic agents that target molecular mechanisms is driving innovation in clinical-trial strategies. Although progress has been made, modifications to existing core paradigms in oncology drug development will be required to realize fully the promise of precision medicine