Digital Forensic Survival Podcast

DFSP # 426 - SSH Forensics: Log Analysis

This week I'm wrapping up my series on SSH forensics with a discussion on SSH log triage. Logs...

• 0
• 0
• 3 días

DFSP # 425 - SSH Forensics: Host-Based Artifacts

In the last episode on this topic, I covered SSH from a investigation point of view. I explained...

• 0
• 0
• 10 días

DFSP # 424 - SSH Forensics: Understanding Secure Shell

SSH is a protocol used to secure remote access to systems, making it a cornerstone in...

• 0
• 0
• 17 días

DFSP # 423 - Guiding Lights: Cyber Investigations Investigation Lifecycle

This week I'm discussing a fundamental aspect of cybersecurity: incident response preparation....

• 0
• 0
• 24 días

DFSP # 422 - EVTX Express: Cracking into Windows Logs Like a Pro

Today I'm talking Windows forensics, focusing on Windows event logs. These logs are very valuable...

• 0
• 0
• 1 mes

DFSP # 421 - Memory Lane: Fileless Linux Attacks Unraveled

In this podcast episode, we talk about Linux's `memfd` – a virtual file system allowing the...

• 0
• 0
• 1 mes

DFSP # 420 - Failing, Stopping and Crashing

This week we explore into the world of Windows service event codes and their role in forensic...

• 0
• 0
• 1 mes

DFSP # 419 - What the Flux

This week, we're delving into the realm of fast flux, a cunning technique employed by attackers...

• 0
• 0
• 2 meses

DFSP # 418 - Core Insights: Navigating MFT in Forensics

In this week's exploration, I'm delving into the intricate realm of the Master File Table (MFT),...

• 0
• 0
• 2 meses

DFSP # 417 - Unlocking Linux Secrets

This week I delve into the intriguing domain of Linux malware triage. The Linux platform presents...

• 0
• 0
• 2 meses

DFSP # 416 - Persistence Mechanisms on Windows

This week I’m going to talk about New Service Installation details recorded in Windows event...

• 0
• 0
• 2 meses

DFSP # 415 - Dealing with Third-Party Incidents

Organizations leverage third-party services more and more for business advantages. For the...

• 0
• 0
• 3 meses

DFSP # 414 - CRON Forensics

Cron become important and Linux forensics when you’re talking about persistence. Think scheduled...

• 0
• 0
• 3 meses

DFSP # 413 - Ransomware Initial Response

Ransomware cases can be particularly challenging, especially during the initial response. They...

• 0
• 0
• 3 meses

DFSP # 412 - Conhost Forensics

Conhost, or the Console Application Host, often comes up during investigations. Understanding...

• 0
• 0
• 3 meses

DFSP # 411 - NTLM Credential Validation

This week I'm talking about detecting evidence of lateral movement on Window systems using NTLM...

• 0
• 0
• 3 meses

DFSP # 410 - Linux Temp Directories

Temporary directories play a significant role in computer forensic investigations as they can...

• 0
• 0
• 4 meses

DFSP # 409 - Regsvcs and Regasm Abuse

This week I’m talking about Regsvcs /Regasm exploitation, which is a Windows tactic attackers use...

• 0
• 0
• 4 meses

DFSP # 408 - Nesting

This week I’m talking about Nested Groups and the risk they pose for security. Built-in to the...

• 0
• 0
• 4 meses

DFSP # 407 - More About Lateral Movement and Kerberos

This week it's more about lateral movement and kerberos events.

• 0
• 0
• 4 meses