DFSP # 387 - Network Share Modifications
This week I talk about adding, modifying, and removing network shares through the lens of detecting lateral movement.
18 Jul 202320min
DFSP # 386- The Three Task Hosts
This week I break down the three Windows task hosts from a DFIR point of view.
11 Jul 202312min
DFSP # 385 - Network Share Access
This week I talk about network share access events and lateral movement detection.
4 Jul 202319min
DFSP # 384 - Cloud Talk with SUMURI
This week Jason Roslewicz from SUMURI returns for some cloud talk.
27 Jun 20231h 16min
DFSP # 383 - WMI Exploitation
This week I talk about the exploitation of the Windows Management Instrumentation application.
20 Jun 202320min
DFSP # 382 - Protocol Buffers
This week Chris Currier and I talk about mobile forensics and protocol buffers.
13 Jun 202340min
DFSP # 381 - Spoliation
This week I cover Windows events commonly associated with data spoliation and insider threats.
6 Jun 202316min
DFSP # 380 - Ransomware Talk with SUMURI
This week Jason Roslewicz from SUMURI returns for some ransomware talk.
30 Mai 202358min
