DFSP # 283 - CSA Cloud Threats 5
This week we take another look at the top threats to cloud computing. On tap This week is account hijacking. All analysts working in the DFIR field today must be aware of threats to cloud computing in...
20 Jul 202110min
DFSP # 282 - Lateral MM Fast Triage
This week I talk about lateral movement fast triage. This is the next topic in the Windows fast triage miniseries and it aligns with the goal of the entire series, which is to help new or any analyst ...
13 Jul 202112min
DFSP # 281 - Fast Triage case study: persistence
This week I'm doing another walk-through to illustrate how standard triage methodology can detect advanced attack techniques. Sometimes as a newer examiner, it's easy to become overwhelmed with the te...
6 Jul 202112min
DFSP # 280 - Malware Fast Triage
This week I'm covering malware fast triage. It occurred to me that I should revisit this issue for a couple of different reasons. I remember covering this many years ago and I believe that's why I hav...
29 Jun 202117min
DFSP # 279 - CSA Cloud Threats 4
This week is about the top threats to cloud computing.
22 Jun 202114min
DFSP # 278 - Process Triage & CMD
This week is a continuation of the Windows fast triage miniseries. While other aspects of the triage miniseries had fairly contained artifacts to examine, new process triage presents a large and compl...
15 Jun 202117min
DFSP # 277 - Learning from the Red Team II
A while back I did an episode on "learning from the red team" which focused on methods blue team members can utilize to better understand attacks and the artifacts affected by those attacks. One of th...
8 Jun 202110min
DFSP # 276 - CVSS Fast Analysis
This week is about how size up a reported vulnerability quickly.
1 Jun 202115min
