
DFSP # 235 - Scheduled Task Change
This week I talk about examining Windows Scheduled Task change events for evidence of persistence.
18 Elo 202017min

DFSP # 234 - Divide & Conquer with Brian Carrier
This week I interview Brian Carrier, SVP & CTO of Basis Technology about his "Divide & Conquer" approach to DFIR investigations.
11 Elo 202021min

DFSP # 233 - New Scheduled Tasks
This week I talk about examining Windows New Scheduled Task events for evidence of persistence.
4 Elo 202021min

DFSP # 232 - Exam Process - Soup-to-Nuts
This week Chris of MSAB shares his recommended process for DFIR exam standardization.
28 Heinä 202032min

DFSP # 231 - Service Change Triage
This week I talk about examining Windows Service modification events for evidence of persistence.
21 Heinä 202018min

DFSP # 230 - User Activity Artifacts
This week I talk about the artifacts and methodology for examining user activity on Windows systems.
14 Heinä 202021min

DFSP # 229 - Mobile Attacks Part 2
This week is part 2 of the Mobile Attack series.
7 Heinä 202020min

DFSP # 228 - Psychology of Reporting
This week I interview Steve Whalen of SUMURI and we talk about effective ways to report forensic findings.
30 Kesä 202023min














