DFSP # 315 - ARTHIR
This we can talk about Arthir, an open source platform for windows incident response and threat hunting.
1 Mars 202212min
DFSP # 314 - Future of Cyber Security
This week Max Lamothe-Brassard talks about the future of cyber security.
22 Feb 202244min
DFSP # 313 - Shimcache and Amcache
This week is a back to basic episode featuring Shimcache and Amcache. Learn what they are, why they are important to many investigations and the pitfalls to avoid.
15 Feb 202218min
DFSP # 312 - Cloud Network Security Services
This week is about Cloud Network Security Services.
8 Feb 202215min
DFSP # 311 - Data Spoliation Fast Triage
This week we continue with the Windows fast triage series and talk about data spoliation detection.
1 Feb 202213min
DFSP # 310 - Cloud Network Segmentation
This week is about cloud network segmentation. Network segmentation has security advantages, and that's regardless of whether or not security is the intention. There are some big differences between t...
25 Jan 202213min
DFSP # 309 - Insider Threats
This week I cover insider threat, which is sort of a gray area between traditional investigations and DFIR investigations.
18 Jan 202221min
DFSP # 308 - Cloud Access Controls
This week I'm talking about identity access controls commonly encountered in cloud environments. These come up during DFIR investigations and high-level awareness, at the least, is necessary for analy...
11 Jan 202216min
