DFSP # 363 - RDP Forensics
This week I talk about how to approach investigations involving remote desktop connections.
31 Jan 202317min
DFSP # 362 - Windows Core Processes
This week I talk about Windows core processes from a DFIR point of view.
24 Jan 202319min
DFSP # 361 - Powershell Breakdown
This week I talk about Powershell attack IOCs.
17 Jan 202315min
DFSP # 360 - Permitted Events
This week I talk about how to triage Windows events for network connection activity.
10 Jan 202313min
DFSP # 359 - Career Checkpoint
This week is my annual career assessment review - or, my guidelines of how to evaluate your past performance and your future goals.
3 Jan 202315min
DFSP # 358 - Listening Ports
This week I talk about how to triage Windows events for network listening activity.
27 Des 202216min
DFSP # 357 - EVTX Analysis
This week I talk about an approach for reviewing Windows event logs.
20 Des 202215min
DFSP # 356 - CMD Triage
This week I talk about an approach for reviewing CMD syntax for findings.
13 Des 202214min
