DFSP # 339 - That SUDO that you do
This week I breakdown the SUDOERS file for forensic triage.
16 Elo 202215min
DFSP # 338 - Taskers
This week's focus is on new scheduled tasks, which are a common way of establishing longevity on system. I will have my breakdown of the artifact and how to interpret it for fast analysis coming up….
9 Elo 202220min
DFSP # 337 - ResponderCon
The must-attend event for Cyber First Responders who must detect and deal with ransomware, zero-day events, and more!
2 Elo 202218min
DFSP # 336 - BAM!
This week I talk about the Windows Background Activity Monitor, an artifact that may be used to find evidence of execution.
26 Heinä 202212min
DFSP # 335 - CRON
This week I breakdown CRON for the uninitiated.
19 Heinä 202213min
DFSP # 334 - Service Changes
This week is about persistence artifacts. Namely the records for when services fail to start, are either started or stopped, have crashed have had their start type changed. Since services are one of t...
12 Heinä 202221min
DFSP # 333 - Mac Autoruns
This week I talk Mac autoruns.
5 Heinä 202220min
DFSP # 332 - Bash Histories
This week is about bash history forensics.
28 Kesä 202218min
