DFSP # 267 - Sunscreen
This week is a case study that demonstrates the power behind IR fundamental methodology.
30 Mars 202114min
DFSP # 266 - Windows non-core processes
This week I continue with the fast triage method for processes with a focus on, well, everything else!
23 Mars 202118min
DFSP # 265 - CSA Cloud Threats 1
This week is about the top threats to cloud computing.
16 Mars 202119min
DFSP # 264 - Golden SAML
This week is about preparing for Golden SAML attacks for both Incident Response and Threat Hunting.
9 Mars 202112min
DFSP # 263 - Threat Hunt with Statistics
This week is about applying basic statistical analysis to threat hunting. The results are effective!
2 Mars 202125min
DFSP # 262 - Security Theatre
This week is about theatrics in security and how to avoid the trap.
23 Feb 202117min
DFSP # 261 - Wincore Processes Revisited part 2
This week I revisit Windows Core Processes and the triage methods to apply to them.
16 Feb 202115min
DFSP # 260 - Learn from the Red Team
This week I talk about vulnhub, a free resource to practice ethical hacking skills and sharpen your DFIR skills.
9 Feb 202114min
