Digital Forensic Survival Podcast

This week I talk about examining Windows Scheduled Task change events for evidence of persistence.

This week I interview Brian Carrier, SVP & CTO of Basis Technology about his "Divide & Conquer" approach to DFIR investigations.

This week I talk about examining Windows New Scheduled Task events for evidence of persistence.

This week Chris of MSAB shares his recommended process for DFIR exam standardization.

This week I talk about examining Windows Service modification events for evidence of persistence.

This week I talk about the artifacts and methodology for examining user activity on Windows systems.

This week is part 2 of the Mobile Attack series.

This week I interview Steve Whalen of SUMURI and we talk about effective ways to report forensic findings.

This week I talk about examining Windows systems for evidence of persistence.

This week I talk about a triage methodology for examining user activity.

This week I talk about mobile device compromise.

This week I talk about examining Conhost data for evidence of execution.

This week I interview Steve Whalen of SUMURI about Apple metadata.

This week I talk about a triage methodology for examining suspicious user accounts.

This week I talk about mobile device operating system and file system security, focusing specifically on applications.

This week I interview MSAB instructor Chris Currier about mobile forensics for new examiners.

This week I talk about persistence, malware analysis and identifying system owners.

This week I talk about SOF-ELK to take your timelines to a new level

This week I talk about CFF Explorer.

This week I talk with MSAB about DHASH, learn what it is and its use in DFIR investigations