David Cowen에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 David Cowen 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.
Player FM -팟 캐스트 앱
Player FM 앱으로 오프라인으로 전환하세요!
Player FM 앱으로 오프라인으로 전환하세요!
들어볼 가치가 있는 팟캐스트
스폰서 후원
S
Species Unite
1 Patti Truant Anderson: Polling and the Surprising Results Around What People Really Think About the Food System 24:55
24:55
나중에 재생
나중에 재생
리스트
좋아요
좋아요
24:55Text “Do people even want to know about some of these issues? Because I think some of the meat production concerns, it's kind of like people would rather in some cases, I think some people might not really want to know all the nitty gritty. They don't want to know how the sausage is made. That poses an interesting question and challenge about how you communicate about some of these issues, when maybe there's a resistance among a subset of people who don't want to know more.” - Patti Truant Anderson Today’s episode is the final installment in our special four-part series where we take a deep dive into the food system with experts from the Johns Hopkins Center for a Livable Future. Our guest is Patti Truant Anderson, a senior program officer at the Center and a faculty associate in the Department of Health Policy and Management at the Johns Hopkins Bloomberg School of Public Health. Patti’s work focuses on public health risks, environmental challenges tied to food production, and how to communicate these critical issues more effectively. Patti and I explore how polling helps uncover public perceptions around food systems and why the country isn’t as polarized on these issues as we might think. We also talk about the challenge of engaging people who may resist learning about the harsh realities of our food system. This episode is not just about data—it’s about how we can foster a shared understanding and move forward, even in times of deep political division. Links: Johns Hopkins Center for a Livable Future - https://clf.jhsph.edu/ Patti Truant Anderson - https://clf.jhsph.edu/about-us/staff/patti-truant-anderson…
Forensic Lunch 5/3/19 CCDC AMA Live
Manage episode 259109752 series 119025
David Cowen에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 David Cowen 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.
The Forensic Lunch!
Sli.do link https://app2.sli.do/event/hzkazryr/live/questions
This broadcast we are doing a live AMA from Reddit all about the NCCDC Redteam
101 에피소드
Manage episode 259109752 series 119025
David Cowen에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 David Cowen 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.
The Forensic Lunch!
Sli.do link https://app2.sli.do/event/hzkazryr/live/questions
This broadcast we are doing a live AMA from Reddit all about the NCCDC Redteam
101 에피소드
Alle Folgen
×The Forensic Lunch! This week with Willi Ballenthin from the Mandiant FLARE Team talking about their tools
The Forensic Lunch! This week with Sarah Edwards and Jared Barnhart talking about iphone testing labs, app testing and decoding apple photos machine learning identified photo metadata
Forensic Lunch! This week with Jordan Barth talking about Azure and the Cloud!
Forensic Lunch! This week it's time for the second Annual National Collegiate Cyber Defense Competition Redteam AMA!
Forensic Lunch! This week with Google Incident Response Management Team! Learn how Google does IR Management and hear from Joachim Metz, James Nettesheim, Matt Linton and Alex Jager
Forensic Lunch! This week with Eric Zimmerman showing SQLite Explorer and Javier Marcos discussing OSCtrl for OSQuery
Forensic Lunch! This week with Yogesh Kahtri talking about MAC_APT, Brian Moran and Yuri Gubanov from Belkasoft
Forensic Lunch! This week with Michael Cohen doing an hour and a half of Velociraptor!
The Forensic Lunch! This week we are bringing Jad Saliba and Jessica Hyde from Magnet talking about the month of great content they've been hosting and the new things coming out of Magnet. In addition we will have the winner of the Magnet Virtual CTF 2020!
1 Forensic Lunch 5/8/20 - Jack Farley, Josh Brunty, Kevin Pagano, Tom Pace, Jim Arnold 1:17:01
1:17:01
나중에 재생
나중에 재생
리스트
좋아요
좋아요
1:17:01This week on the Forensic Lunch we had: Josh Brunty, @joshbrunty , talking about his DFIR program at Marshall https://www.marshall.edu/cyber/ Tom Pace of Blackberry Cyclance and Jim Arnold of KPMG talking about recent ransomware trends. Kevin Pagano, @kevpagano3 , talking about his Sunday Funday and the Magnet Virtual CTF Jack Farley, @jackfarley248 , talking about MEAT and the Magnet Virtual CTF https://github.com/jfarley248/MEAT You can watch it here: https://youtu.be/fPzSm-hofA0…
1 Forensic Lunch 5/1/20 - Oleg Skulkin (FeatureUsage), Brian Marks (Office 365) , Lee Whitfield 4CAST 1:25:07
1:25:07
나중에 재생
나중에 재생
리스트
좋아요
좋아요
1:25:07This week the Forensic Lunch went into Overtime! We went a full 25 minutes over the usual hour because we had so much to talk about. On this weeks show: Matt Seyer ( @forensic_matt ) talked all about the etl parser and monitor he's working on in Rust! https://github.com/forensicmatt/RsWindowsThingies Oleg Skulkin ( @oskulkin ) talked about how he approaches Sunday Funday's (he's won 3!) and about his new blog post about the Windows FeatureUsage artifact. https://www.group-ib.com/blog/featureusage Brian Marks ( @briandfir ) talked about how the Office365 UAL MailboxItemsAccessed Audit event works and what the entry details mean Lee Whitfield ( @lee_whitfield ) talked through the Forensic 4Cast Awards nominations that end in two weeks, and Matt and I gave who we will be nominating. https://forensic4cast.com/2020/02/2020-forensic-4cast-awards-nominations-are-open/…
1 Forensic Lunch 4/24/20 with the Google IR Team (GRR, Timesketch, Turbinia, DTTimewolf, More!) 1:17:52
1:17:52
나중에 재생
나중에 재생
리스트
좋아요
좋아요
1:17:52We had a jam packed Forensic Lunch today with a portion of the Google IR team today talking all about the open source tools they develop, use and support in their work at Google. Specifically we had : Mikhail Bushkov giving a big update on GRR https://github.com/google/grr Johan Berggren ( https://twitter.com/jberggren ) and Kristinn Gudjonsson ( https://twitter.com/el_killerdwarf ) talking about Timesketch and Data science https://github.com/google/timesketch Aaron Peterson ( https://twitter.com/aarontpeterson ) talking about Turbinia https://github.com/google/turbinia Thomas Chopitea ( https://twitter.com/tomchop_ ) talking about DTTimewolf https://github.com/log2timeline/dftimewolf Theo Giovanna talking about libcloudforensics aka cloudforensicutils https://github.com/google/cloud-forensics-utils/tree/master/libcloudforensics Joachin Metz ( https://twitter.com/joachimmetz ) - Talking about Plaso, libntfs and Libyal Plaso: https://github.com/log2timeline/plaso Libfsntfs: https://github.com/libyal/libfsntfs Libyal: https://github.com/libyal Join them on the Open Source DFIR Slack: https://join-open-source-dfir-slack.herokuapp.com/ Read more about what they are doing on the Open Source DFIR Blog: https://osdfir.blogspot.com/…
Today on the Forensic Lunch we only had one guest, Zach Wasserman, from OSQuery technical steering committee. We only had one guest because we knew we would have so much to talk to Zach about! From OSQuery's future in the linux foundation, Kollide Fleet and other fleet managers to Zach's work at Dactiv, LLC you have alot waiting for you in this weeks broadcast. You can reach Zach Wasserman on twitter @ TheZachW or Zach can be reached at zach@dactiv.llc if you want to work with him!…
1 Forensic Lunch 4/10/20 with Belkasoft, AWS IR Automation, MVS DFIRFIT and HTTP Security Headers 1:05:33
1:05:33
나중에 재생
나중에 재생
리스트
좋아요
좋아요
1:05:33What a great Forensic Lunch today! On today's broadcast we had: Yuri Gubanov (@belkasoft) giving an update about whats going on at Belkasoft. Including their IOS 13.4 full file system acquisition using Checkm8, their new IR module in Belkasoft Evidence Center and a neat capability to do managed remote logical phone collections. Steve Gibson and Spencer Hendee (@stevegibson) from KPMG (disclaimer I work there too!) came on to discuss the really cool AWS Cloud IR Automation we've been working on. Brian Moran (@brimorlabs) social media maven and principal of BriMorLabs came on to discuss the Magnet Virtual Summit DFIRFIT 2020 where for a donation (and some excercise) you can get a cool prize pack shipped to you anywhere in the world! Register here: https://mvsdfirfit2020.com Caleb Queern (@HttpSecHeaders) also of KPMG came on to discuss the clearsite HTTP header. This was interesting as its a directive a website can give to a browser to tell it to clear/not store history or data about it. This will need to be tested, you can read more here https://w3c.github.io/webappsec-clear-site-data/ So great stuff this week, you can watch below. Otherwise next week we've already confirmed Zach Wasserman to come and talk about OSQuery and Kollide!…
On this episode: Mari Degrazia (@MariDegrazia) discussing her research into WinSCP and later movement, you can read more here: http://az4n6.blogspot.com/2020/02/detecting-laterial-movment-with-winscp.html Hal Pomeranz (@hal_pomeranz) talking about his new Linux Forensics course that you can download here: https://ia801406.us.archive.org/6/items/HalLinuxForensics/HalLinuxForens ics_archive.torrent Alex Levinson (@alexlevinson) Gave an update on the National Collegiate Cyber Defense Competition which as gone all virtual this year Matt Seyer (forensic_matt) talked about our upcoming SANS DFIR presentation and tools he's working on Sarah Edwards (@iamevltwin) gave colorful commentary and meaningful insights…
Live with Rick Holland, Ryan Johnson and Evan Dygert
1 Forensic Lunch 10/25/19 - Champlain DFA Defcon DFIR CTF - Martin Korman - Regipy 58:34
58:34
나중에 재생
나중에 재생
리스트
좋아요
좋아요
58:34The Forensic Lunch! This week with the Champlain Digital Forensics Association talking about the Defcon DFIR CTF and Martin Korman talking about his project regipy
This week with Alex Levinson from Uber
The Forensic Lunch! Sli.do link https://app2.sli.do/event/hzkazryr/live/questions This broadcast we are doing a live AMA from Reddit all about the NCCDC Redteam
The Forensic Lunch! Live from the Magnet User Summit 2019!
1 Forensic Lunch 3/20/20 - Lance Spitzner and Jessica Hyde 57:24
57:24
나중에 재생
나중에 재생
리스트
좋아요
좋아요
57:24with Lance Spitzner talking about Sans Live Online, Jessica Hyde talking about the Magnet Virtual Summit
1 Forensic Lunch 3/8/19 Eric Zimmerman, Lee Whitfield , Kape, Forensic 4Cast, Nominations 1:01:34
1:01:34
나중에 재생
나중에 재생
리스트
좋아요
좋아요
1:01:34The Forensic Lunch 3/8/19! The twice a month, usually, podcast/videocast that's all about DFIR This week we have: Eric Zimmerman, talking about KAPE Lee Whitfield, talking about the Forensic 4Cast award nominations
Forensic Lunch ANZAC edition with Michael Cohen talking about Velociraptor Shanna Daly talking about her work in Australia Phil Moore, Nick Klein talking about their new entity and thisweekin4n6
Forensic Lunch with Sarah Edwards, Ashley Hernandez , Dr Joe Sylve catching us up with the new combined Celebrite/Blackbag
1 Forensic Lunch 2/1/19 Blanche Lagny Amcache DFIR Review 1:02:12
1:02:12
나중에 재생
나중에 재생
리스트
좋아요
좋아요
1:02:12The Forensic Lunch 2/1/19! The twice a month, usually, podcast/videocast that's all about DFIR This week we have: Blanche Lagny talking about her paper on Amcache The DFIR Review crew talking about .. DFIR Review! crew entails: Jessica Hyde Vico Marziale Brett Shavers Tony Knutson
1 Forensic Lunch 1/24/20 - Ryan Benson, Jessica Hyde and Aaron Sparling 1:03:20
1:03:20
나중에 재생
나중에 재생
리스트
좋아요
좋아요
1:03:20Forensic Lunch! Live with Ryan Benson talking about Unfurl, Jessica Hyde and Aaron Sparling talking about Memory forensics
This week Lee Whitfield joins us to discuss the DFIR Summit and Matt showed us his rust based live windows monitors for DFIR Research
The Forensic Lunch! Live this week with jaco_za who walked us through how he won the Magnet User Summit CTF we built.
Live from the DFIR Summit in Austin, Texas. This short episode we had Rob Lee talking about the new Windows Forensics Poster and Lee Whitfield talking about the Forensic 4cast awards.
Live from the Magnet User Summit in Las Vegas with Jessica Hyde, Heather Mahalik, Jad Saliba, Matthew Seyer and David Cowen
Live with Jason Jordaan talking about DFIR in South Africa, James Cooksey talking about Belkasoft, Troy Schnack talking about his work and being nominated for Forensicator of the Year, Matthew Seyer and David Cowen
Live with Maxime Lamothe-Brassard, Nicole Ibrahim, Matthew Seyer and David Cowen talking about ETLs, the SANS DFIR Summit, and Lima Charlie
Live with Lee Whitfield, Matthew Seyer and David Cowen talking about the Forensic 4Cast award Nominees
The Forensic Lunch live with Matthew Seyer and David Cowen talking about how Office saves files and more testing
Live with Maxim Suhanov (@errno_fail), Matthew Seyer and David Cowen talking about Registry Forensics, Transactional Registry logs and his library YARP
Live with Eric Zimmerman, Matthew Seyer and David Cowen talking about Registry Explorer and transactional registries
Live with Phill Moore, Dr. Bradley Schatz, Matthew Seyer and David Cowen talking about This week in forensics and Evimetry
Live with Ashley Hernandez, Joe Sylve, Matthew Seyer and David Cowen talking about Blacklight and Blackbag
Forensic Lunch Live with Devon Ackerman, Matthew Seyer and David Cowen. Devon Ackerman presented on Office365 forensics
Forensic Lunch Live with Lee Whitfield, Matthew Seyer and David Cowen
Forensic Lunch Test Kitchen live DFIR testing on 12/7/17
Forensic Lunch Test Kitchen live DFIR testing on 12/6/17
Forensic Lunch Test Kitchen live DFIR testing on 12/5/17
The Forensic Lunch Test Kitchen 12/4/17, live testing of forensic artifacts
The Forensic Lunch live with Mark Mckinnon, Brian Moran, Brian Carrier and Jessica Hyde
The Forensic Lunch live with Rebekah Brown
The Forensic Lunch with Chuck Norris, correlation in Arrango DB and shellbags testing
Forensic Lunch With Elizabeth Schweinsberg talking about DFRWS
The Forensic Lunch with Mary Ellen Kennel and Devon Ackerman talking about the AbourDFIR project
This week Jessica Hyde and Brian Moran joined us talking about their research into Amazon Alexa and Google Home.
Live From Enfuse Day 3! This week with Lesley Carhart, @hacks4pancakes talking about being the very first Women in Technology solving for X award presented by Guidance Software, hacks4kids and her dfir research interests Dr. Bradley Shatz, @wirespeed4n6, talking about DFRWS evimetry, aff4 and his new advanced imager Ashley Hernandez, @ashleyatencase, talking about all the new things coming from guidance regarding Encase Forensic, Endpoint investigator and mobile acquisition/examiner…
Steve Whalen from Sumuri, Jake Williams from Rendition Infosec and Dmitry Sumin from Passware
Live with Amber Shroader of Paraben, Matt Bromiley from SANS, Matt Mcfadden Director of training from Opentext/Guidance
The Forensic Lunch! This week we had: Cindy Murphy, @CindyMurph Matt Linton, @0xMatt Ryan Pittman no @ to be had talking about how music and forensics goes together and the impact of listening to music on solving technical issues. Also Matt and I talked about Enfuse as well as stupid shell item tricks.…
Paul Shomo comes on to talk about Guidance Software's new Forensic Artifact Research Program where you can get $5,000 USD just for research you are already doing! Find out more here: https://bugcrowd.com/guidancesoftware?preview=114da7695ff86ae70ec01aaf2c6878b0&utm_campaign=9617-Forensic_artifact-20170426&utm_medium=Email&utm_source=Eloqua Phil Hagen introduced the new SANS Network Forensics poster to be released later this month Matt Bromiley is talking about the Ken Johnson Scholarship setup by SANS and KPMG you can learn more and apply here https://digital-forensics.sans.org/blog/2017/03/03/ken-johnson-dfir-scholarship Phil, Matt, Lee and I talked about the DFIR Summit Lee Whitfield and I talked about the 4Cast Awards, Voting is open here: https://forensic4cast.com/forensic-4cast-awards/…
This week have: Ashley Hernandez from Guidance Software talking about Enfuse Nicole Ibrahim from G-C Partners talking about event tracing logs in Windows Lee Whitfield summing up the news of the week
This episode we catch up with Lee on the news and talk about current issues in DFIR.
This episode we talk vault 7 leaks with Lee Whitfield, what it means for DFIR and other news as well as DFIR database usage discussions and development updates with Matthew and I.
Michael Louis joins us to talk about how lawyers select and vet experts. Also talks about Toastmasters and how they teach good presentation skills and analogy creation through their program. Matt Bromiley is here to announce BBQ Con!
Ryan Benson is here to talk about updates to Hindsight, what he's been up to and his other tool SQUID. David Dym came on to talk about FAT32 removable storage and the things OSX does to it.
The forensic lunch!The one hour, mostly, DFIR videocast/podcastThis weeks guest:Jared Atkinson,@jaredcatkinson, talking about about DFIR in powershell or as he calls his toolset PowerForensicsWhat a great Forensic Lunch today with Jared Atkinson talking all about how to do forensics on a live system or mounted image with his Powershell framework PowerForensics.You can grab your own copy of PowerForensics on Github here:https://github.com/Invoke-IR/PowerForensicsRead his Blog here:www.invoke-ir.comVote for him in the Forensic4Cast Awards here:https://forensic4cast.com/forensic-4cast-awards/Reminder I'm up for voting in another category as well!and of course you can follow him on Twitter here:https://twitter.com/jaredcatkinsonBtw, if you want to learn Windows Forensic with me I'm schedule to teach SANS FOR408 Windows Forensics in Houston May 9-14. You can find out more here:https://www.sans.org/event/houston-2016/course/windows-forensic-analysis…
The Forensic Lunch!The one hour, mostly, videocast/podcast all about DFIR.This weeks guests:Maxime Lamothe-Brassard of Refraction Point talking about his project Lima Charlie https://github.com/refractionPOINT/li...Ryan Nolette, Security Operations Lead at Carbon Black, talking about all of the ransomware variants he's been seeing and how shadow copies are affectedUs talking about how different tools deal with shadow copies and accessing deleted shadow copies…
It's the forensic lunch! This broadcast James and I go through the results of our testing of different file carving tools: X-Ways Forensics Bulk Extractor Blade Blackbag Blacklight
It's the Forensic Lunch! The one hour, mostly, videocast/podcast all about DFIR! This weeks guests:Austin Colby, Joe Sylve and Vico Marziale from Black Bag talking about the newest additions to the new version coming out in a matter of days.
The Forensic Lunch!The 1 hour, usually, videocast/podcast that brings you the latest in new DFIR research, topics and people. This weeks guests:Hal Pomeranz,@hal_pomeranz, of Deer Run associates talking about updates to his Linux Memory Grabber and some research into bash_history behavior.You can get the linux memory grabber he discussed here https://github.com/halpomeranz/lmgHal can be reached at hal@deer-run.comEric Zimmerman,@EricRZimmerman, of Kroll's cyber security practice talking about prefetch and explaining his tool to get more, as well as whats new in Windows 10 prefetchYou can get Eric's prefetch parser here: https://github.com/EricZimmerman/Prefetchhttp://www.kroll.com/en-us/who-we-are/kroll-experts/eric-zimmermanMatthew and I showing how to use the hfs+ journal parser and what to do with itYou can get the HFS+ Journal parser here: https://www.gettriforce.com/product/hfs-journal-parser/…
The first new lunch of the new year withSarah Holmes of the Foreman project (Open Source DFIR Matter Management), You can get a copy (and contribute to!) foreman here: https://bitbucket.org/lowmanio/foreman/ You can contact Sarah here: sarah@lowmanio.co.ukMichael Robinson of the Black T-Shirt Cyber Forensics Challenge talking about well the Black T-Shirt Cyber Forensics ChallengeYou can join the Black T-Shirt Cyber Forensics Challenge here: http://cyberforensicschallenge.com/ You can contact them at cyberforensicschallenge@gmail.comOur FSEvents tool will be released just as soon as we write documentation for it. Want an early release for testing? Email me dcowen@g-cpartners.com…
Forensic Lunch! This episode we are live from Google in Mountain View, California getting an update on their development projects. Included are: LibYAL Forensic Artifact project GRR (Google Rapid Response) Rekall memory analysis platform Plaso Timesketch and more!
Forensic Lunch!This weeks guests:Andrew Case,@attrc, from the Volatility Project talking about Volatility 2.5, new plugins and the winners of this years Volatility Plugin ContestYogesh Kahtri, from Champlain, talking about SRUM forensics in Windows 8.1+. A truly amazing new artifact Matt and I talking about our new open source tool Elastic Handler…
The Forensic Lunch! In this episode we are broadcasting live from OSDFCon with the following content: 1. A revised set of rules from our popular forensic game. This time we follow $10,000 pyramid rules to see which of two forensic teams can win! 2. Brian Carrier from Basis Technology talking about whats new Autopsy 4.0 3. Rob Fry from Netflix talking about their new open source framework called Fido and hanging with Kevin Spacey 4. Matthew and I talking about our new automation, normalization and correlation framework ElasticHandler…
1 Forensic Lunch 10/9/15 with Dave Hawkins, Chris Pavan and James Habben 1:00:35
1:00:35
나중에 재생
나중에 재생
리스트
좋아요
좋아요
1:00:35This week on the forensic lunch we have: Dave Hawkins talking about his firms currently unbeaten contest, lampbash.work Chris Pavan, talking about his computer forensics program at Cal State Fullerton and his work in IR at Bechtel James Habben talking about his web based front end to volatility called eVOLVe and all the cool things you can do with it…
1 Forensic Lunch 9/25/15 with Mari Degrazia, Lee Whitfield and Suzanne Widdup 1:00:11
1:00:11
나중에 재생
나중에 재생
리스트
좋아요
좋아요
1:00:11This broadcast we have: Mari Degrazia talking about testing MFT parsers and what goes into them. Lee Whitfield talking about the events of the week Suzanne Widdup talking about her work on the Verizon DBIR and a solicitation for your involvement A talk about Cortana's location tracking storage
Live from CEIC with Michael Robinson, Ronald Clark and more!
In this episode:We discuss the Ashley Madison Data Leak and it's implications for DFIRDavid Dym, @dave873, talks about the newest version of Metadiver and it's ability to show even more metadata, including the contents of pst files and extended mapi!Get it at: www.easymetadata.comMatthew and I talk about our new open source project GC LNK Parser which exposes all of the shell item data we didn't know was there! (Except Joachim Metz) We also preview our integration of our tools to Elastic Search, a preview of our OSDF Con talk and a short talk about things to come in Triforce. Also SANS FOR578, Cyber Threat Intelligence, is now available publicly! Learn more about it here: https://www.sans.org/course/cyber-thr... The SANS Poster on Rekall Memory forensics is out as well and you can get it here: https://www.sans.org/security-resourc...…
In this episode recorded in front of a live audience:Our first game of Forensic PassphraseVitaliy Mokosiy of Atola talking about Atola Insight Forensic and its cool direct firmware controlsBrain Carrier of Basis Technology talking about Autopsy 3, Plugin development with Python and OSDF ConBrian Moran of BriMor Labs talking about his live response scripts and new trends in attacker activities…
Freedom Edition!Join Matt and I and current guests:Eric Zimmerman, talking deleted registry key analysis and new features in Registry Explorer and more! You can get the #DFIRSummit release here: https://www.dropbox.com/s/s7doopqpwxz...
Lee Whitfield comes on to talk about the Forensic 4Cast awards which are now taking nominations. Jonathan Poling came on to talk about his new blog and his work at Secureworks
Friend of the show Eric Zimmerman is back to talk about updates to his tools and research
Davida and I talk about whats new in our research, tools and packages
Michael Gough talking with us about his tool LOG-MD and his work. We also go into SRUM again showing new data we can correlate within it.
This episodes is all about Hibernation files and Mark Spencer's company Arsenal Consulting research into it that led to the creation of a new tool called Hibernation Recon.
Live broadcast from OSDF Con 2016 Talking about DCITA, Autopsy and the academic program that Mark McKinnon is running at Davenport. Sorry about the audio on this one, we had a bad upstream.
The forensic lunch! The twice a month live videocast/podcast all about #DFIR This episode we have: Bradley Schatz of Shatz Forensics and Evimetry, @blschatz, talking about his amazing new toolset Evimetry. Watch this first segment to learn more about AFF4, imaging bottlenecks and how his toolset can allow faster imaging locally, remotely and in cloud while doing a bunch of other really cool stuff! Learn more about his toolset here: http://evimetry.com/ Scott Wahlstrom of KPMG, @wahlstros, came on to talk about the deployable mobile forensic GoKits KPMG has been testing and using in the field. Cool stuff here if you ever wonder how you can bring an entire analysis lab to a data center for a week. Lastly Matt and I talk about whats new in Windows 10 Forensics with the following artifacts covered: Lnk Files Recent Docs Shell bags and Jumplists Watch a couple times to really understand the impact this will have on your investigations!…
The Forensic Lunch! The videocast/livecast/podcast all about #DFIR! This week we have Eric Zimmerman talking about the work he did speed and scale testing Encase, FTK and X-ways. Also Matthew and I talking about our newest tool BitRocker which will expose which recovery keys will unlock a bitlocker encrypted volume. Get our newest tool BitRocker here: https://www.gettriforce.com/product/bitrocker-bitlocker-recovery-key-identifier/ Read Eric's testing here: https://binaryforay.blogspot.com/2016/09/let-benchmarks-hit-floor-autopsy-vs.html…
The Forensic Lunch! The twice a month live videocast/podcast all about #DFIR ! This broadcast is all about running an isolated virtual network on Intels newest NUC, the Skull Canyon. Watch the video to see us demonstrate running 5 vms in an isolated virtual network on a small, fast and low powered portable system. You can get the Intel NUC Skull Canyon at amazon here: https://smile.amazon.com/Intel-NUC-Ki... or at your local Microcenter or Fry's This is the M.2 NVME SSD Drive I'm using to get 2GB/s reads and 1.5GB/s writes: https://smile.amazon.com/Samsung-950-... This is the memory I used: https://smile.amazon.com/Crucial-16GB... Here is the link to the free version of ESXI v6: https://my.vmware.com/en/web/vmware/e... Expect a blog post where I go through the process…
The Forensic Lunch! The twice a month live videocast/podcast all about #DFIR !\ This broadcast: Matt Bromiley, +Matt Bromiley talking about filters he has made for Elastic Handler and work Talking about the 1st Annual Defcon Forensic CTF Updates to EventMonkey to work with EVTXtract from Willi Ballenthin and bringing in descriptions and more! Download the Defcon Forensics CTF Here: https://forum.defcon.org/forum/defcon... The password to extract: ,sli38pdsf;aj8387f*HKlnelne7fy7GUHMBNWlo9udsijw_kn3ohfsa8y^%%T Submit your answers here: whymirosh@gmail.com Link to event monkey: https://github.com/devgc/EventMonkey…
It's the Forensic Lunch! The twice a month live videocast/podcast all about DFIR This episode's guests: Phil Hagen Eric Zimmerman Links: - Twitter: @SOF_ELK - Config/code repo: http://for572.com/sof-elk-git - VM readme (w/ instructions and download link):
It's the Forensic Lunch! The twice monthly videocast/podcast just about #DFIR join us as we talk about whats new and what new things you can do! This broadcast we are taking the time to update you on our own tools. We talked about: Pancake Viewer, an open source tool to visually explore forensic images and shadow copies (like an open source ftk imager), https://github.com/forensicmatt/PancakeViewer Event Monkey, an open source and multi threaded event log parser that outputs to sqlite and ElasticSearch, https://github.com/devgc/EventMonkey Event Monkey Monitor, a tool we are working on releasing that lets you monitor event logs in real time pytskUSBDeviceForensics, a version of WoanWare's USB Device Forensics program that allows you to feed in images, https://github.com/woanware/usbdeviceforensics/blob/master/pyTskusbdeviceforensics.py…
This episode is live from Enfuse with Jake Williams and Heather Mahalik Paul Shomo of Guidance Software Ashley Hernandez of Guidance Software Jeff Hedlesky of Guidance Software
Forensic Lunch live from EnFuse with Rob Batzloff talking about Encase 8, and James Wiebe talking about new advancements at CRU
The Forensic Lunch! A special episode hosted by Nicole Ibrahim and featuring in no particular order: Mari Degrazia Cindy Murphy Heather Mahalik Sarah Edwards Shelly Giesbrecht
Guests are Matt Bromiley Dimitry from Bocasoft
Live from CEIC. Ben LeMere from Berla, Jeff the Product Evanglist from Guidance Software, Amber Shroader from Paraben, and more!
The you should have filed your taxes edition!This week is all about the Forensic 4cast awards. We cover all of the nominees and make our official votes.
The thank goodness April Fools day is over editionGuests this week:Devon Kerr talking about his work at Mandiant/Fireeye and his research into WMI for both IR and attacker usage.You can email Devon here: devon.kerr@mandiant.comand you can follow him on twitter here: https://twitter.com/_devonkerr_ Get cool tools from the Mandiant github here: https://github.com/mandiant Watch Devon talk more about WMI and IR at the SANS DFIR Summit: http://dfir.to/1BvOw7G Matthew and I going into the Automating DFIR series and our upcoming talk at CEICWe are on the CEIC agenda here: https://www.guidancesoftware.com/ceic...…
We had another great Forensic Lunch! This broadcast we had:James Carder of the Mayo Clinic, @carderjames, talking all about automating your response process to separate the random attacks from sophisticated attacks. You can hear James talk about this and much more at the SANS DFIR Summit where he'll be a panelist! If you want to work with James Mayo Clinic is hiring.Mayo Clinic Infosec and IR Jobs: http://www.mayo-clinic-jobs.com/go/in... Contact James Carder: carder.james@mayo.eduSpecial Agent Eric Zimmerman of the FBI, @EricRZimmerman , talking about his upcoming in depth Shellbags talk at the SANS DFIR Summit as well as his new tool called Registry Explorer. RE and Eric's research into windows registries will be continued in the next broadcast. Whether you are interested in registries from a research, academic or investigative perspective this is a must see, and FREE, tool!Eric's Blog: http://binaryforay.blogspot.com/ Eric's Github: https://github.com/EricZimmerman Registry Explorer: http://binaryforay.blogspot.com/p/sof...…
Guests this broadcast:Ben LeMere of Berla talking about Vehicle Forensics, Embedded Systems, Cam bus networks and all the fun he's been having with doing forensics on car entertainment systems. You may be very surprised but what he has to say!Lee Whitfield talking about Superfish, what happened and what you need to know. Robin Keir of Crowdstrike talking about his research and role at Crowdstrike, specifically Superfetch and CrowdResponseShow linksBen LeMereWebsite: http://Berla.co Twitter: @BenLeMereLee WhitfieldForensic 4cast Award Nominations: https://forensic4cast.com/forensic-4c... Twitter: @lee_whitfieldRobin KeirWebsite: http://www.crowdstrike.com/ Crowd Response: http://www.crowdstrike.com/community-... Twitter: @RobinKeir…
The after Thanksgiving Hangover edition: This week we had Eric Zimmerman, @ericrzimmerman, talking about Shellbags, his tool Shellbag explorer and our research into new things we can determine from them.
We had an interesting Forensic Lunch today with:Rob Fuller, @mubix, talking about his new project, project mentor http://www.projectmentor.net/ where Rob is offering to help mentor you into developing the real technical skills in infosec and dfir to get into the industry and other noble aspirations.David Dym, @dave873, talking about the latest version of Metadiver which is available to download at http://www.easymetadata.com/wp/ which can crawl a directory and pull out all the metadata it can find into xls, json, xml and other formats. He also makes shadowkit.Kevin Stokes talking about how to extend and expand our USB Multiboot Dongle, you can download the dongle image here: https://mega.co.nz/#!i45WhQya!SQILk0T... Zoltan Szabo, talking about his stance on Digital Forensics as a science.You can email him at zoltandfw@gmail.com if you want to give your feedback to his opinions.…
This week with:Yogesh Kahtri talking about his Windows 8 registry forensics research (You can read it here http://www.swiftforensics.com/ and email him yogesh@swiftforensics.com) Dan Pullega talking about his extensive research into Windows Shellbags ( http://www.4n6k.com/2013/12/shellbags... and email Dan at dan.pullega@gmail.com) David Dym talking about his new tool MetaDiver (You can download it here http://www.easymetadata.com/wp/ ) and Matthew and myself talking about v3 of ANJP and demoing the auto detection of CD Burning.…
Robert Haist, talking about his research with page_brute in recovering command execution and other fun things from the pagefile, read his blog about it here: http://blog.roberthaist.com/2013/12/r... Amber Shroader, talking about Device Seizure 6.5 and a great discussion on what happens behind the scenes in your mobile forensics tools as well as the future of cloud phone data acquisition. You can find out more about Device Seizure here: http://www.paraben.com/device-seizure... Joakim Schicht, discussing his tools and research, including how he approaches these projects and develops them. You can find his google code repository here: http://code.google.com/p/mft2csv/ with all the tools mentioned today and more!…
플레이어 FM에 오신것을 환영합니다!
플레이어 FM은 웹에서 고품질 팟캐스트를 검색하여 지금 바로 즐길 수 있도록 합니다. 최고의 팟캐스트 앱이며 Android, iPhone 및 웹에서도 작동합니다. 장치 간 구독 동기화를 위해 가입하세요.