Digital Forensic Survival Podcast

This week I talk about the forensic value of YARA.

This week I talk about OWASP's Number 4 vulnerability category from their top 10 list, XXE attacks. I explore the issue from a DFIR point of view.

This week I talk about the Google Hacking Database.

This week I talk about CEWL, a freely available tool for crawling websites to produce unique wordlists (think password attacks!)

This week I talk about my new Github page and the autoweb script.

This week I talk about Applocker Bypass from a DFIR point of view.

This week I talk about OWASP's Number 3 vulnerability category from their top 10 list, sensitive data exposure. I explore the issue from a DFIR point of view.

This week I talk about tips for building a threat hunting program.

This week I break down webshells for threat hunting and incident response triage.

This week I talk about contacting Mimikatz through windows event log.

This week I talk about PDF analysis tools to check for malicious indictors in PDFs.

This week I talk about OWASP and why you should be paying attention.

Tips from the DFIR Trenches

This week I breakdown CRON for the uninitiated.

This week I talk about investigation strategies for logon events.

This week I talk about PCAP hunting strategies.

This week I interview Craig Rowland of Sandfly Security about crypto-mining attacks on Linux systems. Learn more about Sandfly at https://www.sandflysecurity.com

This week I talk about OWASP and why you should be paying attention.

This week I talk about the attack methodology known as Fast Flux.

This week I talk about details about what to look at in Scheduled Task records for forensic triage.