DFSP # 363 - RDP Forensics
This week I talk about how to approach investigations involving remote desktop connections.
31 Tammi 202317min
DFSP # 362 - Windows Core Processes
This week I talk about Windows core processes from a DFIR point of view.
24 Tammi 202319min
DFSP # 361 - Powershell Breakdown
This week I talk about Powershell attack IOCs.
17 Tammi 202315min
DFSP # 360 - Permitted Events
This week I talk about how to triage Windows events for network connection activity.
10 Tammi 202313min
DFSP # 359 - Career Checkpoint
This week is my annual career assessment review - or, my guidelines of how to evaluate your past performance and your future goals.
3 Tammi 202315min
DFSP # 358 - Listening Ports
This week I talk about how to triage Windows events for network listening activity.
27 Joulu 202216min
DFSP # 357 - EVTX Analysis
This week I talk about an approach for reviewing Windows event logs.
20 Joulu 202215min
DFSP # 356 - CMD Triage
This week I talk about an approach for reviewing CMD syntax for findings.
13 Joulu 202214min
