Digital Forensic Survival Podcast

This week I Cover my all-time favorite Windows event, security event 4688: new process creation. If you do windows, incident, response, forensics, this is a must-know know artifact.

23 Touko 202318min

This week I talk about SVCHOST; how it fits into the Windows operating system, and how to think about it from a DFIR point of view.

16 Touko 202318min

This week I talk with Interview with Yugal Pathak about organizational forensic readiness.

9 Touko 202339min

This week I talk about the role and typical responsibilities DFIR professionals may be called up to take to assist with a zero-day response.

2 Touko 202325min

This week Jason Roslewicz from SUMURI returns to talk more about AI issues.

25 Huhti 202330min

This week I break down the Windows System Resource Usage Monitor from a DFIR point of view.

18 Huhti 202315min

This week I cover some malware detection methods for Linux.

11 Huhti 202319min

This week I talk about different ways to approach windows process triage. There are so many processes, especially in enterprise environments, having a standard approach that is fast and effective is k...

4 Huhti 202325min