See me Run: Hunt Bots Before They Ransom You
Trickbot, Qakbot, Dridex, Hancitor.
Content Industry: Enterprise
Reporting findings at a technical level in digital forensics: A guide to reporting
One of the primary roles of a practitioner in the field of digital forensics is to conduct the examination of any lawfully seized digital device content, and report upon any findings which may support any inquiry being conducted.
Linux Acquisitions Made Easier – An Open-Source, Extensible Framework
For the common investigator, Windows acquisition is something we see and perform nearly daily, and we have our trusted set of tools to acquire and process specific triage artifacts.
IoT Forensics – Apple Airtag and Crowd Sourced Tracking
Since the release of the device, Apple’s latest IoT (or Internet of Things) product, the Airtag, has been a resounding success both commercially and technologically, but not without its share of issues.
Exploitation vulnerable Gitea application through which we can gain authenticated command execution to a Kubernetes cluster
This presentation will cover the forensics artifacts that are associated with the exploitation of a Kubernetes cluster.
Digital Forensics’s role in e-Discovery
This presentation will focus on the role that digital forensics has in an organizations e-discovery program. We will discuss how digital forensics, utilized in the proper way, will enable an organization to be compliant with ligation holds and other court orders. Additionally, we will discuss pitfalls, challenges, and limitations.
Deploying Forensic Solutions in the Cloud
When deploying cloud solutions in a LEO or consultative organization, we often keep the discussion focused on the legality of acquired data and storing it in the Cloud. This is important, but there are other things to consider such as how you will setup, deploy, secure and run the day-to-day when you’re in the Cloud.
DFIRL Episode 06: Toxic Relationship – The Murder of Mary Yoder (Part 1)
Episode 06 of Digital Forensics in Real Life is part one of a two-part episode, with a case that involved so many truckloads of evidence we couldn’t pack it all into one podcast. It involved two trials, three main suspects, and hours of forensic analysis by our guest and his team. This case it the … Continued
Magnet Axiom Cyber review from DFIR Training: Some (Awesome) personal observations
Noted DFIR expert Brett Shavers provides an in-depth review of Magnet Axiom Cyber and how it can be useful in enterprise investigations. In this review, Brett reflects on his history with Magnet Forensics products and how they’ve been beneficial to the community over the years. Additionally, he explains some of the basic functions and advanced … Continued
Magnet AUTOMATE Enterprise and how it can streamline workflow for the Corporate World.
Magnet AUTOMATE Enterprise is a new solution that provides parallel processing of multiple target endpoints and evidence sources while automating manual tasks in the forensics workflow.