DFSP # 195 – BAM!
This week I talk about the Windows Background Activity Monitor, an artifact that may be used to find evidence of execution.
15 Nov 201912min
DFSP # 194 - Powershell Collection Tools
This week I talk about some issues surrounding powershell when used as a digital forensic collection tool.
5 Nov 201914min
DFSP # 193 - LOKI
This week I talk about LOKI, a tool designed to help analyst scan for APT IOCs.
29 Okt 201915min
DFSP # 192 - KAPE
This week I talk about KAPE, a freely available forensic evidence collection and triage tool.
22 Okt 201917min
DFSP # 191 - Linux File Systems
This week I talk about the common Linux file systems and what to expect when dealing with different hosts.
15 Okt 201912min
DFSP # 190 - Dead Simple Boot Disks
This week I go over how to create a boot disk using the native capability of Ubuntu. You'll never have to rely on third-party tools again!
9 Okt 201916min
DFSP # 188 - Container Attack Vectors
This week I breakdown container attack vectors for Cloud Incident Response.
1 Okt 201922min
DFSP # 187 - SUDOERS File and Forensics
This week I breakdown the SUDOERS file for forensic triage.
1 Okt 201914min
