Sinopsis
Listen to talk about computer forensic analysis, techniques, methodology, tool reviews and more.
Episodios
-
DFSP # 135 - Scheduled Task Triage Part 1
18/09/2018 Duración: 13minThis week I talk about details about what to look at in Scheduled Task records for forensic triage.
-
DFSP # 134 -OfficeMalScanner
11/09/2018 Duración: 17minThis week I talk OfficeMalScanner, a malware scanner for Microsoft document
-
-
DFSP # 132 - Root Cause
28/08/2018 Duración: 18minThis week I talk about methodologies to investigate root cause during incident response investigations.
-
DFSP # 131 - PIDS
21/08/2018 Duración: 21minThis week I talk about PIDS in their uses and computer forensic investigations.
-
DFSP # 130 - Network Scoping
14/08/2018 Duración: 17minThis week I talk about scoping network connections as part of incident response triage
-
DFSP # 129 - Excel Fu for Frequency Analysis
07/08/2018 Duración: 20minThis week I talk more excel fu tips
-
DFSP # 128 - GREP vs SED vs AWK
31/07/2018 Duración: 17minThis week I talk the difference between common text processing utilities used in forensic analysis
-
-
DFSP # 126 - Star Grepping
17/07/2018 Duración: 26minThis week I talk about the value of Grep as a forensic skillset
-
DFSP # 125 - Distributed Hash Cracking
10/07/2018 Duración: 19minThis week I talk about distributed password cracking with Hashtopolis for Hashcat
-
DFSP # 124 - iOS USB Restricted Mode
03/07/2018 Duración: 20minThis week I talk about the security changes coming with iOS 11.4
-
DFSP # 123 - IP Triage
26/06/2018 Duración: 22minThis week I talk about IP address and domain triage for computer forensic investigations.
-
-
DFSP # 121 - Adventures in Scripting
12/06/2018 Duración: 18minThis week I talk about getting started in scripting
-
DFSP # 120 - Rita
05/06/2018 Duración: 16minThis week I talk about Rita, a free Threat Hunting Tool from Black Hills Information Security
-
-
DFSP # 118 - .bash_history forensics
22/05/2018 Duración: 20minThis week I talk about Linux triage using the /.bash_history artifact
-
DFSP # 117 - USNJRNL Tool Review
15/05/2018 Duración: 18minThis week I review two tools for extracting and parsing USNJRNL evidence.
-
DFSP # 116 - Automatic Detection of Malware from Memory Analysis
08/05/2018 Duración: 20minThis week I talk about a clever way to leverage Volatility to triage malware on a target system