This week I talk about OWASP's Number 3 vulnerability category from their top 10 list, sensitive data exposure. I explore the issue from a DFIR point of view.

This week I talk about tips for building a threat hunting program.

This week I break down webshells for threat hunting and incident response triage.

This week I talk about contacting Mimikatz through windows event log.

This week I talk about PDF analysis tools to check for malicious indictors in PDFs.

This week I talk about OWASP and why you should be paying attention.

Tips from the DFIR Trenches

This week I breakdown CRON for the uninitiated.

This week I talk about investigation strategies for logon events.

This week I talk about PCAP hunting strategies.

This week I interview Craig Rowland of Sandfly Security about crypto-mining attacks on Linux systems.

Learn more about Sandfly at https://www.sandflysecurity.com

This week I talk about OWASP and why you should be paying attention.

This week I talk about the attack methodology known as Fast Flux.

This week I talk about details about what to look at in Scheduled Task records for forensic triage.

This week I talk about details about what to look at in Scheduled Task records for forensic triage.

This week I talk OfficeMalScanner, a malware scanner for Microsoft document

This week I talk Ultimate windows security

This week I talk about methodologies to investigate root cause during incident response investigations.

This week I talk about PIDS in their uses and computer forensic investigations.

This week I talk about scoping network connections as part of incident response triage

This week I talk more excel fu tips

This week I talk the difference between common text processing utilities used in forensic analysis

This week I talk about DNS and forensics

This week I talk about the value of Grep as a forensic skillset

This week I talk about distributed password cracking with Hashtopolis for Hashcat