Digital Forensic Survival Podcast

This week I cover triaging CMSTP for remote execution

This week I explain why you need CyberChef in your toolbox

This week I talk DFIR triage for Microsoft Trusted Dev Utilities

This week I review resources aimed at teaching you Python

This week I interview Steve Whalen from SUMURI about the current Mac Forensic landscape

This week I talk about Pivot Tables and their value for DFIR investigations

This week I talk about common autorun locations to check during Mac exams

This week I talk about a fast triage methodology to detect persistence on Windows systems

This week I talk about tools available on the SIFT workstation... that you may not know or even there!

This week I talk breakdown certutil exploitation; what it is and methods to detect malicious usage

This week I talk about using layered drivers as an artifact to identify persistence

This week I talk about SOF ELK, a freely available pre-built virtual appliance for DFIR work

This week I start the year with my traditional "back-to-basics" episode, focusing on self-improvement themes and goals to consider

This week I talk about dealing with Base64 evidence.

This week I talk about identifying REGSVC \ REGASM abuse

This week I talk about different types of audit log clearing and detection strategies

This week I talk about using Hashdeep for forensic triage

This week I talk about LMD, an openly available tool to increase Linux security posture.

This week I talk about network forensic methodology.

This week I talk about autoLLR, a script to automate evidence collection on live Linux systems as well as artifact post processing.