
DFSP # 379 - New Process Creation
This week I Cover my all-time favorite Windows event, security event 4688: new process creation. If you do windows, incident, response, forensics, this is a must-know know artifact.
23 Mai 202318min

DFSP # 378 - SVCHOST Revisited
This week I talk about SVCHOST; how it fits into the Windows operating system, and how to think about it from a DFIR point of view.
16 Mai 202318min

DFSP # 377 - Interview with Yugal Pathak
This week I talk with Interview with Yugal Pathak about organizational forensic readiness.
9 Mai 202339min

DFSP # 376 - Zero-Day and DFIR
This week I talk about the role and typical responsibilities DFIR professionals may be called up to take to assist with a zero-day response.
2 Mai 202325min

DFSP # 375 - More AI with SUMURI
This week Jason Roslewicz from SUMURI returns to talk more about AI issues.
25 Apr 202330min

DFSP # 374 - SRUM
This week I break down the Windows System Resource Usage Monitor from a DFIR point of view.
18 Apr 202315min

DFSP # 373 - Linux File Poisoning
This week I cover some malware detection methods for Linux.
11 Apr 202319min

DFSP # 372 - Windows Processes
This week I talk about different ways to approach windows process triage. There are so many processes, especially in enterprise environments, having a standard approach that is fast and effective is k...
4 Apr 202325min


















