
DFSP # 307 - Career Strategy Checkup
This week is my advice for conducting a career critique as well as to plan for the future - or at least for 2022. I do this episode every year at this time with the intention of helping newer analysts...
4 Jan 202230min

DFSP # 306 - Lateral MM Fast Triage 5
This week we continue with the Windows fast triage series and talk about lateral movement evidence that may be found in DC records.
28 Des 202111min

DFSP # 305 - CSA Cloud Threats 8
This week is a continuation of the threats to cloud computing miniseries. We are stepping through the top 11 threats to cloud computing as identified by the Cloud Security alliance. When you are prote...
21 Des 202110min

DFSP # 304 - Detecting File Poisoning on Linux
This week I review a great method to detect file poisoning on Linux using all native commands.
14 Des 202114min

DFSP # 303 - Mac Artifacts with SUMURI
This week SUMURI's Steve Whalen (a.k.a. 'MacBoy') talks Mac artifacts
7 Des 202135min

DFSP # 302 - Lateral MM Fast Triage 4
This week we continue with the Windows fast triage series and talk about lateral movement evidence that may be found in logon event records.
30 Nov 202115min

DFSP # 301 - OSDFCON 2021
This week Brian Carrier of Basis Technology joins me to talk about OSDFCon. The DFIR community relies on open source tools and the conference is a great way to get exposure to new tools and to learn h...
23 Nov 202122min

DFSP # 300 - Case Study Ocean Lotus
This week is a case study where we look at an actual attack strategy and compared it against standard triage methods to see how well they hold up. In this episode I break down some attack methods attr...
16 Nov 202120min


















