DFIR Madness - Page 2 of 3 - Sharing the Thrill of the Hunt

Attribution and Threat Hunting, the Missing Steps After an Incident

Attribution and Threat Hunting

Case 001 Memory Analysis

Building a DFIR Analysis Fort

Forensic Artifacts Rundown

Forensic Artifacts Thumbprint

Case 001 – The Stolen Szechuan Sauce

The Stolen Szechuan Sauce

Answers to the Case of the Stolen Szechuan Sauce (Case001)

Investigating Shellcode Alerts without PCAPs

Investigating Shellcode Alerts

P2FUST – Adding Context to Declare Bad

Building a SIEM at Home

Building a SIEM at home