Digital Forensic Survival Podcast

DFSP # 469 Network Blocked Activity

Informações:

Sinopsis

Today’s episode is all about Windows event logs that record blocked network connections. Blocked network events are interesting because they might signal that an attacker’s secondary or tertiary toolset isn’t working as intended. That’s good news from a security standpoint...