Pages

▼
Monday, January 22, 2024

Lists of Images

›
There're a lot of discussions out there on social media regarding how to get started or improve yourself or set yourself apart in cybers...
7 comments:
Monday, January 15, 2024

EDRSilencer

›
There's been a good bit of discussion in the cybersecurity community regarding "EDR bypasses", and most of these discussions h...
Wednesday, January 10, 2024

Human Behavior In Digital Forensics, pt III

›
So far, parts I and II of this series have been published, and at this point, there's something that we really haven't talked abou...
1 comment:
Saturday, January 06, 2024

Human Behavior In Digital Forensics, pt II

›
On the heels of my first post on this topic , I wanted to follow up with some additional case studies that might demonstrate how digital for...
2 comments:
Wednesday, January 03, 2024

Human Behavior In Digital Forensics

›
I I've always been a fan of books or shows where someone follow clues and develops an overall picture to lead them to their end goal. I...
7 comments:
Sunday, December 31, 2023

2023 Wrap-up

›
Another trip around the sun is in the books. Looking back over the year, I thought I'd tie a bow on some of the things I'd done, and...
Monday, December 18, 2023

Round Up

›
MSSQL is still a thing TheDFIRReport recently posted an article regarding BlueSky ransomware being deployed following MSSQL being brute for...
Monday, December 11, 2023

...and the question is...

›
I received an interesting question via LinkedIn not long ago, but before we dive into the question and the response... If you've followe...
Tuesday, November 28, 2023

Roll-up

›
One of the things I love about the industry is that it's like fashion...given enough time, the style that came and went comes back aroun...
Friday, November 10, 2023

Roll-up

›
I don't like checklists in #DFIR.  Rather, I don't like how checklists are used in #DFIR. Too often, they're used as a replaceme...
Monday, October 09, 2023

Investigating Time Stomping

›
Some analysts may be familiar with the topic of time stomping, particularly as it applies to the NTFS file system, and is explained in great...
Tuesday, September 19, 2023

The State of Windows Digital Analysis, pt II

›
On the heels of my previous blog post on this topic , I read a report that, in a lot of ways, really highlighted some of the issues I mentio...
1 comment:
Tuesday, September 12, 2023

The State of Windows Digital Analysis

›
Something that I've seen and been concerned about for some time now is the state of digital analysis, particularly when it comes to Wind...
2 comments: