Digital Forensic Survival Podcast

Latest Episodes:

DFSP # 209 - Mac Autoruns Feb 18, 2020

Show notes

This week I talk about common autorun locations to check during Mac exams

DFSP # 208 - Persistence Fast Triage Feb 11, 2020

Show notes

This week I talk about a fast triage methodology to detect persistence on Windows systems

DFSP # 207 - Forensic Grab Bag Feb 04, 2020

Show notes

This week I talk about tools available on the SIFT workstation... that you may not know or even there!

DFSP # 206 - Certutil Abuse Jan 28, 2020

Show notes

This week I talk breakdown certutil exploitation; what it is and methods to detect malicious usage

DFSP # 205 - Layered Drivers Jan 21, 2020

Show notes

This week I talk about using layered drivers as an artifact to identify persistence

DFSP # 204 - SOF ELK Jan 14, 2020

Show notes

This week I talk about SOF ELK, a freely available pre-built virtual appliance for DFIR work

DFSP # 203 - Profile of a modern analyst Jan 07, 2020

Show notes

This week I start the year with my traditional "back-to-basics" episode, focusing on self-improvement themes and goals to consider

DFSP # 202 - Base64 Forensics Dec 31, 2019

Show notes

This week I talk about dealing with Base64 evidence.

DFSP # 201 - Regsvcs Triage Dec 24, 2019

Show notes

This week I talk about identifying REGSVC \ REGASM abuse

DFSP # 200 - Audit Log Clearing Dec 17, 2019

Show notes

This week I talk about different types of audit log clearing and detection strategies