The Importance of Avoiding Rabbit Holes in DFIR
About the importance of avoiding rabbit holes in DFIR
top of page
Blog
Search
- Mar 17
- 3 min
Top 10 LoL Binaries and Techniques Used by Cyber Threat Actors
Living off the Land Binaries (LoLBins) are legitimate Windows system files, tools, and executables that can be used by attackers to...
2,281 views
- Jan 18
- 4 min
Cognitive Biases in Digital Forensics
Cognitive biases are systematic patterns of deviation from the norm or rationality in judgment, whereby inferences about other people and...
202 views
- Jan 2
- 6 min
Password auditing with mixed AMD and Nvidia GPUs
The time has arrived to upgrade the GPU of your desktop PC. The price, performance and other features of the latest generation of AMD...
53 views
- Dec 25, 2022
- 6 min
Incident Response for SMBs
Small and medium businesses (SMBs) are particularly vulnerable to cyber attacks due to their limited resources and expertise in cyber...
134 views
- Jun 24, 2022
- 5 min
Acquiring Forensic Artifacts with Falcon Uploader and Amazon S3 Buckets
Introduction Often Incident Response Analysts struggle to extract forensic artifacts from specific systems during an incident...
263 views
- Jan 20, 2022
- 6 min
How is an Incident Response Retainer Essential For Your Success?
It is best to be prepared for any disaster. Isn’t it? Having an external incident response retainer is a part of such preparation where...
176 views
- Aug 29, 2020
- 12 min
Hunting on Sysmon events with Jupyter Notebooks - Process creation
In our previous post, we introduced Sysmon. We provided steps to install a hunting environment that you can use to generate, store, and...
1,373 views
- Aug 22, 2020
- 5 min
Hunting on Sysmon events with Jupyter Notebooks - Environment setup
This post it's the first of a series where we will explore the capabilities of Sysmon and how we can leverage this tool together with...
645 views
bottom of page