FTK Imager 2024 Professional Review: The Ultimate Forensic Imaging Solution

Forensic tool assessment FTK Imager 2024 Professional Review: The Ultimate Forensic Imaging Solution

I. Architectural Innovations & Core Capabilities Ne…

Month of PowerShell – Working with the Event Log, Part 2 Threat Hunting with PowerShell Event Logs

Other Month of PowerShell – Working with the Event Log, Part 2 Threat Hunting with PowerShell Event Logs

In part 1, we looked at the PowerShell command to work …

Investigating WMI Attacks

Other Investigating WMI Attacks

WMI as an attack vector is not new. It has been used to…

FOR509 Course Update – Introducing Google Workspace, the Multi-Cloud Intrusion Challenge, and more

Other FOR509 Course Update – Introducing Google Workspace, the Multi-Cloud Intrusion Challenge, and more

We are excited to announce that the SANS Institute FOR5…

Follina MSDT Zero-Day Q&A

Other Follina MSDT Zero-Day Q&A

A fascinating Word document was uploaded to a file scan…

EnCase Forensic 2024: The Gold Standard in Digital Forensics

Forensic tool assessment EnCase Forensic 2024: The Gold Standard in Digital Forensics

I. Architectural Revolution: The DPE 3.0 Engine Next-Ge…

Executives and Ransomware Stop, Collaborate, and Listen! Webcast Q&A

Other Executives and Ransomware Stop, Collaborate, and Listen! Webcast Q&A

In this discussion, James Shank of Team Cymru and Ryan …

Enterprise Security Tech Q&A

Other Enterprise Security Tech Q&A

In response to the Kaseya ransomware attack Ryan Chapma…

Detecting DLL Hijacking on Windows

Other Detecting DLL Hijacking on Windows

Initially identified fifteen years ago, and clearly art…

Defense Spotlight Finding Hidden Windows Services

Other Defense Spotlight Finding Hidden Windows Services

An attacker can make a Window service disappear from vi…