Now displaying: August, 2020
Aug 25, 2020
This week I interview Steve Whalen of SUMURI about Apple FSEvent artifacts. Learn what they are and how to leverage them for investigations.
Aug 18, 2020
This week I talk about examining Windows Scheduled Task change events for evidence of persistence.
Aug 11, 2020
This week I interview Brian Carrier, SVP & CTO of Basis Technology about his "Divide & Conquer" approach to DFIR investigations.
Aug 4, 2020
This week I talk about examining Windows New Scheduled Task events for evidence of persistence.