DFSP # 307 - Career Strategy Checkup
This week is my advice for conducting a career critique as well as to plan for the future - or at least for 2022. I do this episode every year at this time with the intention of helping newer analysts...
4 Jan 202230min
DFSP # 306 - Lateral MM Fast Triage 5
This week we continue with the Windows fast triage series and talk about lateral movement evidence that may be found in DC records.
28 Dec 202111min
DFSP # 305 - CSA Cloud Threats 8
This week is a continuation of the threats to cloud computing miniseries. We are stepping through the top 11 threats to cloud computing as identified by the Cloud Security alliance. When you are prote...
21 Dec 202110min
DFSP # 304 - Detecting File Poisoning on Linux
This week I review a great method to detect file poisoning on Linux using all native commands.
14 Dec 202114min
DFSP # 303 - Mac Artifacts with SUMURI
This week SUMURI's Steve Whalen (a.k.a. 'MacBoy') talks Mac artifacts
7 Dec 202135min
DFSP # 302 - Lateral MM Fast Triage 4
This week we continue with the Windows fast triage series and talk about lateral movement evidence that may be found in logon event records.
30 Nov 202115min
DFSP # 301 - OSDFCON 2021
This week Brian Carrier of Basis Technology joins me to talk about OSDFCon. The DFIR community relies on open source tools and the conference is a great way to get exposure to new tools and to learn h...
23 Nov 202122min
DFSP # 300 - Case Study Ocean Lotus
This week is a case study where we look at an actual attack strategy and compared it against standard triage methods to see how well they hold up. In this episode I break down some attack methods attr...
16 Nov 202120min
