DFSP # 481 Triage outside the Core

DFSP # 485 BAM! Packing Punch

This week, I delve into the Windows BAM artifact, unraveling its forensic significance and exploring how it can unlock critical insights in digital investigations.

DFSP # 483 Cooking up Forensics with Chef

In this week’s episode, I delve into strategies for integrating CHEF into your security investigations, unlocking new avenues for proactive defense and effective incident response.

DFSP # 482 Unlocking Clues from Bash and Hidden Keys

This week, we’re pulling back the curtain on SSH from a digital forensics perspective.

DFSP # 481 Triage outside the Core

In this week’s episode, I dive into rapid triage techniques for non-core Windows executables to uncover signs of malicious activity.

DFSP # 480 Hidden risks of nested groups

This week, I’m talking about nested groups in Windows Active Directory and the security risks they pose. Active Directory allows administrators to attach one group to another—often called nesting. While nesting can simplify account administration and permission management, it can also create real opportunities for attackers if...