Digital Forensic Survival Podcast

DFSP # 499 Linux top 10

DFSP # 498 Windows top 10

DFSP # 497 ticket to ride

DFSP # 496 Signed, Sealed, Exploited

DFSP # 495 Corrupted from within

DFSP # 494 the request is out there

DFSP # 493 Stop, Share, and Listen

DFSP # 492 A Bit of TCP

DFSP # 491 INF-ltration: The Subtle Art of “Fetch and Execute”

DFSP # 490 Unveiling the USN Journal

DFSP # 489 Hidden Gateways

DFSP # 488 SSH & Red Herrings

DFSP # 487 Unmasking Malicious Activity with 4688

DFSP # 486 Squid Games

DFSP # 485 Certifiably Suspicious

This week, I delve into the Windows BAM artifact, unraveling its forensic significance and exploring how it can unlock critical insights in digital investigations.

In this week’s episode, I delve into strategies for integrating CHEF into your security investigations, unlocking new avenues for proactive defense and effective incident response.

This week, we’re pulling back the curtain on SSH from a digital forensics perspective.

In this week’s episode, I dive into rapid triage techniques for non-core Windows executables to uncover signs of malicious activity.

This week, I’m talking about nested groups in Windows Active Directory and the security risks they pose. Active Directory allows administrators to attach one group to another—often called nesting. While nesting can simplify account administration and permission management, it can also create real opportunities for attackers if...