
DFSP # 307 - Career Strategy Checkup
This week is my advice for conducting a career critique as well as to plan for the future - or at least for 2022. I do this episode every year at this time with the intention of helping newer analysts...
4 Tammi 202230min

DFSP # 306 - Lateral MM Fast Triage 5
This week we continue with the Windows fast triage series and talk about lateral movement evidence that may be found in DC records.
28 Joulu 202111min

DFSP # 305 - CSA Cloud Threats 8
This week is a continuation of the threats to cloud computing miniseries. We are stepping through the top 11 threats to cloud computing as identified by the Cloud Security alliance. When you are prote...
21 Joulu 202110min

DFSP # 304 - Detecting File Poisoning on Linux
This week I review a great method to detect file poisoning on Linux using all native commands.
14 Joulu 202114min

DFSP # 303 - Mac Artifacts with SUMURI
This week SUMURI's Steve Whalen (a.k.a. 'MacBoy') talks Mac artifacts
7 Joulu 202135min

DFSP # 302 - Lateral MM Fast Triage 4
This week we continue with the Windows fast triage series and talk about lateral movement evidence that may be found in logon event records.
30 Marras 202115min

DFSP # 301 - OSDFCON 2021
This week Brian Carrier of Basis Technology joins me to talk about OSDFCon. The DFIR community relies on open source tools and the conference is a great way to get exposure to new tools and to learn h...
23 Marras 202122min

DFSP # 300 - Case Study Ocean Lotus
This week is a case study where we look at an actual attack strategy and compared it against standard triage methods to see how well they hold up. In this episode I break down some attack methods attr...
16 Marras 202120min












