Content Industry: Enterprise

The Growing Importance of Digital Forensics and Incident Response (DFIR) in Corporate Environments

By

With the complexity and frequency of cyber threats targeting businesses growing at alarming rates, digital forensics and incident response (DFIR) has become an indispensable component of cybersecurity programs. DFIR teams in corporate environments are increasingly called on to unravel complex threats and uncover critical insights into incident response investigations, including ransomware attacks, data exfiltration, and … Continued

Best Practices for Ransomware and Data Extortion Memory Response

By

The Cybersecurity and Infrastructure Security Agency (CISA) & partners recently released a “#StopRansomware Guide” Cybersecurity Information Sheet (CSI) which aims at providing guidance to organizations to reduce the impact of ransomware incidents and a checklist of best practices for responding to these threats.

Leveraging AXIOM Cyber in Microsoft Azure

By

Forensic workstations can be expensive! Join us as we discuss the myriad of advantages when conducting forensic examinations in the Cloud. We will walk through the setup, installation, use, and advantages of using Magnet AXIOM CYBER in the Microsoft Azure. You’ll get a chance to see some of the benefits of this approach, including, cost savings, reducing redundancy, the ability to do off-network collections, and the advantage of using a clean VM for every examination.

MVS Replay: Adapting to the Cloud in DFIR

By

One of the biggest changes being felt throughout the fields of digital forensics and incident response is the advances being brought about by cloud computing. The big three in the area (Amazon Web Services [AWS], Microsoft Azure, and Google Cloud) take advantage of the real-time adaptability of the Cloud by always changing and adding new … Continued

MVS Replay: Free Triage Tools to Bolster Your IR Toolkit

By

Time is always of the essence in IR investigations and reducing the time to collect and analyze data is crucial. Triage has become an increasingly important part of DFIR toolkits, enabling forensic investigators to manage the large volumes of alerts and data that could be reviewed to determine the validity and extent of incidents. Join … Continued

S1:E6 // Watching the watchers: Using device metrics for user attribution 

By

In this episode of Mobile Unpacked, Chris Vance will discuss user activity tracking artifacts and how they can be utilized in your forensic investigations.   Modern smartphone operating systems use multiple systems of monitoring user behavior and device metrics to craft a more user-friendly experience. This allows the OS to almost “predict” what application or person … Continued