
DFSP # 186 - Powershell Forensics
This week I talk about Powershell through the lens of the Service Control Manager.
1 Okt 201922min

DFSP # 189 - NVMe
This week I talk about NVMe, a data storage technology, from a forensic point of view.
1 Okt 201915min

DFSP # 185 - Understanding Linux Executables
This week I cover how to approach Linux binaries during investigations.
30 Sep 201917min

DFSP # 184 - Cloud Incident Response
This week I continue the series about the DFIR changes on the horizon with cloud technology and focus on AWS EC2 forensics.
27 Aug 201919min

DFSP # 183 - WMI Forensics
This week I talk about using WMI to create processes remotely.
20 Aug 201922min

DFSP # 182 - Density Scout
This week I talk about Density Scout, an open source tool for malware triage.
13 Aug 201910min

DFSP # 181 - Remote Execution One-Liners
This week I cover a resource you can use to develop windows remote execution triage methodology and threat hunting.
6 Aug 201915min

DFSP # 180 - Credential Guard
This week I talk about the Windows credential guard process.
30 Jul 201910min




















