DFSP # 259 - Wincore Processes Revisited part 1
This week I revisit Windows Core Processes and the triage methods to apply to them.
2 Feb 202120min
DFSP # 258 - Network Triage Part 4
This week is the fourth part of the Network-Fast-Triage mini-series. In this installation I cover triage techniques for Windows event logs that record blocked network activity.
26 Jan 202115min
DFSP # 257 - Supply Chain Attacks
This week is about supply chain security posture from a DFIR point-of-view.
19 Jan 202117min
DFSP # 256 - Kernel Process Masquerading
This week I go over a method to detect kernel process masquerading on Linux systems.
12 Jan 20219min
DFSP # 255 - The Worship of Intelligence in Tech
This week I interview author Shawn Livermore about the myth of the "tech-genius."
5 Jan 202125min
DFSP # 254 - Network Triage Part 3
This week is the third part of the Network-Fast-Triage mini-series. In this installation I cover triage techniques for Windows event logs that record network port-binding.
29 Dec 202016min
DFSP # 253 - Network Triage Part 2
This week is the second part of the Network-Fast-Triage mini-series. In this installation I cover triage techniques for Windows event logs that record network connections.
22 Dec 202015min
DFSP # 252 - Werfault
This week I cover triage techniques for werfault.exe. The process does not have the best documentation which makes it a challenge to triage.
15 Dec 202014min
