Topic: Cybersecurity

S2:E4 // The art and science of AI prompting in digital investigations

By

The effectiveness of AI in digital forensics hinges on one critical factor: how you prompt it.

Join Brandon Epstein for a practical look at how to take control of AI so it works effectively for you. This session will break down what makes a good AI prompt, including effective structures and how they can produce meaningful and reliable outputs. Additionally, he’ll cover common prompting pitfalls that you’ll want to avoid, which can often introduce bias, errors, or hallucinations.

Whether you’re just starting to explore AI or looking to refine your current workflows, this webinar will give you the tools to get the most out of AI as a dependable investigative ally.

Living off the land: Investigating attacks that leave no malware behind

By

Modern attackers increasingly rely on tools already present on the systems they compromise — PowerShell, WMI, scheduled tasks, RDP, and other built-in utilities that blend into normal administrative activity. This episode works through the LOLBin problem in three layers: the detection foundation (baselining tool usage and building appropriately scoped alerts), filtering legitimate from malicious usage by parent process, argument structure, and behavioral context, and the forensic reconstruction — the host artifacts that survive when SIEM telemetry is gone. Covers PowerShell ScriptBlock logs, WMI event subscriptions, scheduled task XML definitions, Shimcache, Amcache, prefetch, and RDP/SMB lateral movement artifacts, with Magnet Axiom Cyber for endpoint artifact analysis and Magnet Nexus for enterprise-wide scoping.

The case against the go-bag

By

Remote digital investigations are transforming how teams collect and analyze evidence, replacing slow on-site methods with faster, more precise workflows.