Digital Forensic Survival podcast

Player FM - Internet Radio Done Right

179 subscribers

추가했습니다 nine 년 전

Michael and Digital Forensic Survival Podcast에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 Michael and Digital Forensic Survival Podcast 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

Digital Forensic Survival Podcast

시리즈 홈•Feed

Listen to talk about computer forensic analysis, techniques, methodology, tool reviews and more.

479 에피소드

#Michael #I Talk #Science #Law #News #Politics #Security #Tech #Software Development #Digital Forensic Survival

Digital Forensic Survival Podcast

179 subscribers

updated 약 14시간 전

시리즈 홈•Feed

Listen to talk about computer forensic analysis, techniques, methodology, tool reviews and more.

479 에피소드

#Michael #I Talk #Science #Law #News #Politics #Security #Tech #Software Development #Digital Forensic Survival

All episodes

Digital Forensic Survival Podcast

1
DFSP # 479 Scan, Score, Secure 15:48

14 hours 전15:48

나중에 재생

리스트

15:48

One of the essential skill sets for a DFIR analyst is the ability to understand the impact of vulnerabilities quickly. In many IR scenarios, you may find a newly discovered vulnerability or receive a scan that flags multiple potential weaknesses. To stay efficient, you must...

Digital Forensic Survival Podcast

1
DFSP # 478 SRUM 15:48

8일 전15:48

나중에 재생

리스트

15:48

This week, we’re exploring the System Resource Usage Monitor (SRUM) – a powerful source of forensic data within Windows operating systems. First introduced...

Digital Forensic Survival Podcast

1
DFSP # 477 SSH Triage 18:17

15일 전18:17

나중에 재생

리스트

18:17

In this episode, our focus is on understanding how attackers achieve lateral movement and persistence through Secure Shell (SSH)—and more importantly, how to spot the forensic traces...

Digital Forensic Survival Podcast

1
DFSP # 476 Service Host 22:43

22일 전22:43

나중에 재생

리스트

22:43

In this episode, we’ll take a focused look at how to triage one of the most commonly targeted Windows processes: svchost.exe. While the methods in this series generally apply to all Windows core processes, svchost is an especially important case because attackers...

Digital Forensic Survival Podcast

1
DFSP # 475 - Set the tone 20:08

28일 전20:08

나중에 재생

리스트

20:08

Ransomware attacks move quickly, making your initial response crucial in minimizing impact. This episode outlines critical first steps, from isolating infected machines to gathering key information and initiating containment. Whether you’re a SOC analyst, incident responder, or the first to notice an attack, this framework is designed to help you regain control. Follow these guidelines to effectively mitigate the damage from the very start.…

Digital Forensic Survival Podcast

1
DFSP # 474 - Meta Paradise 13:20

5 weeks 전13:20

나중에 재생

리스트

13:20

Today’s episode explores Apple Spotlight and its extended metadata—a powerful yet often overlooked forensic tool in the Mac ecosystem. Spotlight plays a critical role in uncovering digital evidence on macOS. Both experienced forensic analysts and newcomers will find its capabilities essential. Let’s dive into the details.…

Digital Forensic Survival Podcast

1
DFSP # 473 - Why all the BINs 21:13

6 weeks 전21:13

나중에 재생

리스트

21:13

BIN directories (short for binary) store command binaries like CD, PWD, LS, Vi, and CAT. Every platform has multiple BIN directories: two in the root directory and two in each user directory. This episode explains the types of files in these directories and the purpose of each BIN directory. I will also clarify which directories are typically used by users versus those used by the root user.…

Digital Forensic Survival Podcast

1
DFSP # 472 - Windows Usual Suspects 16:35

7 weeks 전16:35

나중에 재생

리스트

16:35

Modern Windows systems use a tightly coordinated sequence of core processes to establish secure system and user environments. DFIR investigators and incident responders must understand the interrelationships between processes such as Idle, SMSS, CSRSS, WININIT, and WINLOGON. Recognizing expected behaviors and anomalies in these steps is crucial for detecting potential system compromises. This episode demystifies the Windows 10/11 process flow and provides context for effective triage and analysis.…

Digital Forensic Survival Podcast

1
DFSP # 471 Mac Persistence 17:43

8 weeks 전17:43

나중에 재생

리스트

17:43

Today we’re talking all about MacOS AutoRun locations and how to spot persistence mechanisms. We’ll explore the ins and outs of property list files, launch daemons, system integrity protections, and the recent changes in macOS that can impact your forensic examinations...

Digital Forensic Survival Podcast

1
DFSP # 470 The Windows Taskhosts 17:33

9 weeks 전17:33

나중에 재생

리스트

17:33

This week I'm talking about the three task hosts. These are Windows core files, and they share not only similar names, but similar functionality. Because of this, there is the potential for confusion, which may allow an attacker to leverage these similarities and mask they are malware. My goal in this episode is to demystify the three different task hosts, and provide the necessary insight for proper triage if any of these files come up during your investigations.…

Digital Forensic Survival Podcast

1
DFSP # 469 Network Blocked Activity 21:59

10 weeks 전21:59

나중에 재생

리스트

21:59

Today’s episode is all about Windows event logs that record blocked network connections. Blocked network events are interesting because they might signal that an attacker’s secondary or tertiary toolset isn’t working as intended. That’s good news from a security standpoint...

Digital Forensic Survival Podcast

1
DFSP # 468 Data Brokers & Ransomware 28:24

11 weeks 전28:24

나중에 재생

리스트

28:24

Today I cover an evolving threat in the cybersecurity world: data brokers. From a computer forensics standpoint, this threats pose unique challenges. While breaches capture headlines, data brokers play a major (and sometimes overlooked) role in fueling cybercrime. In this session, we will explore how these threats operate, why they are dangerous, and how computer forensics professionals can combat them.…

Digital Forensic Survival Podcast

1
DFSP # 467 CVSS in Action 28:31

12 weeks 전28:31

나중에 재생

리스트

28:31

The Common Vulnerability Scoring System (CVSS) is a powerful tool for assessing the severity and impact of security vulnerabilities. In digital forensics and incident response, CVSS scores can provide critical context to prioritize investigations and focus on the most significant risks. This episode I will explore how leveraging CVSS scoring enhances vulnerability assessments during incident response, enabling teams to make data-driven decisions.…

Digital Forensic Survival Podcast

1
DFSP # 466 Malware Triage for File Types 23:54

13 weeks 전23:54

나중에 재생

리스트

23:54

Understanding the behavior and characteristics of common file types used in attacks, such as executables, scripts, and document files, is essential for effective analysis. In this episode, we will explore practical approaches to triage malware, focusing on key indicators and techniques for prioritizing investigations.…

Digital Forensic Survival Podcast

1
DFSP # 465 Network Permit Events 23:43

14 weeks 전23:43

나중에 재생

리스트

23:43

Windows permit events, often overlooked, offer valuable details about allowed network connections that can reveal patterns of malicious activity. In this episode, we will dive into how analyzing these events can enhance network triage, enabling security teams to detect, scope, and respond to threats more effectively.…