Digital Forensic Survival Podcast
VitenskapTeknologiListen to talk about computer forensic analysis, techniques, methodology, tool reviews and more.
Siste episoder av Digital Forensic Survival Podcast podcast
- DFSP # 499 Linux top 10 (00:25:05)
- DFSP # 498 Windows top 10 (00:19:27)
- DFSP # 497 ticket to ride (00:15:44)
- DFSP # 496 Signed, Sealed, Exploited (00:12:35)
- DFSP # 495 Corrupted from within (00:14:03)
- DFSP # 494 the request is out there (00:17:48)
- DFSP # 493 Stop, Share, and Listen (00:17:21)
- DFSP # 492 A Bit of TCP (00:20:37)
- DFSP # 491 INF-ltration: The Subtle Art of “Fetch and Execute” (00:13:47)
- DFSP # 490 Unveiling the USN Journal (00:12:13)
- DFSP # 489 Hidden Gateways (00:14:41)
- DFSP # 488 SSH & Red Herrings (00:16:53)
- DFSP # 487 Unmasking Malicious Activity with 4688 (00:13:51)
- DFSP # 486 Squid Games (00:19:35)
- DFSP # 485 Certifiably Suspicious (00:14:00)
- DFSP # 485 BAM! Packing Punch (00:10:58)
This week, I delve into the Windows BAM artifact, unraveling its forensic significance and exploring how it can unlock critical insights in digital investigations.
- DFSP # 483 Cooking up Forensics with Chef (00:14:36)
In this week’s episode, I delve into strategies for integrating CHEF into your security investigations, unlocking new avenues for proactive defense and effective incident response.
- DFSP # 482 Unlocking Clues from Bash and Hidden Keys (00:20:41)
This week, we’re pulling back the curtain on SSH from a digital forensics perspective.
- DFSP # 481 Triage outside the Core (00:20:08)
In this week’s episode, I dive into rapid triage techniques for non-core Windows executables to uncover signs of malicious activity.
- DFSP # 480 Hidden risks of nested groups (00:13:59)
This week, I’m talking about nested groups in Windows Active Directory and the security risks they pose. Active Directory allows administrators to attach one group to another—often called nesting. While nesting can simplify account administration and permission management, it can also create real opportunities for attackers if...
- DFSP # 479 Scan, Score, Secure (00:15:48)
One of the essential skill sets for a DFIR analyst is the ability to understand the impact of vulnerabilities quickly. In many IR scenarios, you may find a newly discovered vulnerability or receive a scan that flags multiple potential weaknesses. To stay efficient, you must...
- DFSP # 478 SRUM (00:15:48)
This week, we’re exploring the System Resource Usage Monitor (SRUM) – a powerful source of forensic data within Windows operating systems. First introduced...
- DFSP # 477 SSH Triage (00:18:17)
In this episode, our focus is on understanding how attackers achieve lateral movement and persistence through Secure Shell (SSH)—and more importantly, how to spot the forensic traces...
- DFSP # 476 Service Host (00:22:43)
In this episode, we’ll take a focused look at how to triage one of the most commonly targeted Windows processes: svchost.exe. While the methods in this series generally apply to all Windows core processes, svchost is an especially important case because attackers...
- DFSP # 475 - Set the tone (00:20:08)
Ransomware attacks move quickly, making your initial response crucial in minimizing impact. This episode outlines critical first steps, from isolating infected machines to gathering key information and initiating containment. Whether you’re a SOC analyst, incident responder, or the first to notice an attack, this framework is designed to help you regain control. Follow these guidelines to effectively mitigate the damage from the very start.