DFSP # 471 Mac Persistence Digital Forensic Survival podcast

19:35

Digital Forensic Survival Podcast

1
DFSP # 485 Certifiably Suspicious 14:00

13 days ago14:00

14:00

Digital Forensic Survival Podcast

1
DFSP # 485 BAM! Packing Punch 10:58

19 days ago10:58

10:58

This week, I delve into the Windows BAM artifact, unraveling its forensic significance and exploring how it can unlock critical insights in digital investigations.

Digital Forensic Survival Podcast

1
DFSP # 483 Cooking up Forensics with Chef 14:36

26 days ago14:36

14:36

In this week’s episode, I delve into strategies for integrating CHEF into your security investigations, unlocking new avenues for proactive defense and effective incident response.

Digital Forensic Survival Podcast

1
DFSP # 482 Unlocking Clues from Bash and Hidden Keys 20:41

5 weeks ago20:41

20:41

This week, we’re pulling back the curtain on SSH from a digital forensics perspective.

Digital Forensic Survival Podcast

1
DFSP # 481 Triage outside the Core 20:08

6 weeks ago20:08

20:08

In this week’s episode, I dive into rapid triage techniques for non-core Windows executables to uncover signs of malicious activity.

Digital Forensic Survival Podcast

1
DFSP # 480 Hidden risks of nested groups 13:59

7 weeks ago13:59

13:59

This week, I’m talking about nested groups in Windows Active Directory and the security risks they pose. Active Directory allows administrators to attach one group to another—often called nesting . While nesting can simplify account administration and permission management, it can also create real opportunities for attackers if...…

Digital Forensic Survival Podcast

1
DFSP # 479 Scan, Score, Secure 15:48

8 weeks ago15:48

15:48

One of the essential skill sets for a DFIR analyst is the ability to understand the impact of vulnerabilities quickly. In many IR scenarios, you may find a newly discovered vulnerability or receive a scan that flags multiple potential weaknesses. To stay efficient, you must...

Digital Forensic Survival Podcast

1
DFSP # 478 SRUM 15:48

9 weeks ago15:48

15:48

This week, we’re exploring the System Resource Usage Monitor (SRUM) – a powerful source of forensic data within Windows operating systems. First introduced...

Digital Forensic Survival Podcast

1
DFSP # 477 SSH Triage 18:17

10 weeks ago18:17

18:17

In this episode, our focus is on understanding how attackers achieve lateral movement and persistence through Secure Shell (SSH)—and more importantly, how to spot the forensic traces...

Digital Forensic Survival Podcast

1
DFSP # 476 Service Host 22:43

11 weeks ago22:43

22:43

In this episode, we’ll take a focused look at how to triage one of the most commonly targeted Windows processes: svchost.exe. While the methods in this series generally apply to all Windows core processes, svchost is an especially important case because attackers...

Digital Forensic Survival Podcast

1
DFSP # 475 - Set the tone 20:08

12 weeks ago20:08

20:08

Ransomware attacks move quickly, making your initial response crucial in minimizing impact. This episode outlines critical first steps, from isolating infected machines to gathering key information and initiating containment. Whether you’re a SOC analyst, incident responder, or the first to notice an attack, this framework is designed to help you regain control. Follow these guidelines to effectively mitigate the damage from the very start.…

Digital Forensic Survival Podcast

1
DFSP # 474 - Meta Paradise 13:20

13 weeks ago13:20

13:20

Today’s episode explores Apple Spotlight and its extended metadata—a powerful yet often overlooked forensic tool in the Mac ecosystem. Spotlight plays a critical role in uncovering digital evidence on macOS. Both experienced forensic analysts and newcomers will find its capabilities essential. Let’s dive into the details.…

Digital Forensic Survival Podcast

1
DFSP # 473 - Why all the BINs 21:13

14 weeks ago21:13

21:13

BIN directories (short for binary) store command binaries like CD, PWD, LS, Vi, and CAT. Every platform has multiple BIN directories: two in the root directory and two in each user directory. This episode explains the types of files in these directories and the purpose of each BIN directory. I will also clarify which directories are typically used by users versus those used by the root user.…

Digital Forensic Survival Podcast

1
DFSP # 472 - Windows Usual Suspects 16:35

15 weeks ago16:35