
DFSP # 211 - Mac Forensics with Steve Whalen
This week I interview Steve Whalen from SUMURI about the current Mac Forensic landscape
3 Mar 202033min

DFSP # 210 - Pivot Tables for Forensics
This week I talk about Pivot Tables and their value for DFIR investigations
25 Feb 202018min

DFSP # 209 - Mac Autoruns
This week I talk about common autorun locations to check during Mac exams
18 Feb 202013min

DFSP # 208 - Persistence Fast Triage
This week I talk about a fast triage methodology to detect persistence on Windows systems
11 Feb 202019min

DFSP # 207 - Forensic Grab Bag
This week I talk about tools available on the SIFT workstation... that you may not know or even there!
4 Feb 202017min

DFSP # 206 - Certutil Abuse
This week I talk breakdown certutil exploitation; what it is and methods to detect malicious usage
28 Jan 202016min

DFSP # 205 - Layered Drivers
This week I talk about using layered drivers as an artifact to identify persistence
21 Jan 202010min

DFSP # 204 - SOF ELK
This week I talk about SOF ELK, a freely available pre-built virtual appliance for DFIR work
14 Jan 202013min



















