DFIR Summit 2021

Keynote: Cobalt Strike Threat Hunting | Chad Tilbury

Cracked versions of Cobalt Strike have rapidly become the attack tool of choice among enlightened global threat actors, making an appearance in almost every recent major hack, including SolarWinds, the ...

[+] Show More

Now Playing

Keynote: Cobalt Strike Threat Hunting | Chad Tilbury

Cracked versions of Cobalt Strike have rapidly become the attack tool...

Now Playing

DFIR 101: Digital Forensics Essentials | Kathryn Hedley

Whether you're new to the field of digital forensics, are working in an...

Now Playing

Incident Response 9-Line | SANS DFIR Summit 2021

The United States military makes extensive use of process and...

Now Playing

IR Playbooks: A New Open Source Resource | Mathieu Saulnier

I often hear that Playbooks can't be shared because they are org...

Now Playing

Scoring and Judging Artifacts in Autopsy | Brian Carrier

Reviewing DFIR data is often like searching the internet in the 90s....

Now Playing

To the Moon! The Cyber Kill Chain Meets Blockchain | Jackie Koven

The professionalization of the criminal underground has led to attack...

Now Playing

Greppin' Logs | Jon Stewart & Noah Rubin

Terabytes of Exchange logs got you down? Need to look for 100 IP...

Now Playing

A Holistic Approach to Defending Business Email Compromise (BEC) Attacks

In 2019, the FBI estimated that the global loss of Business Email...

Now Playing

EZ Tools/KAPE: How to Contribute to and Benefit from Open Source Contributions

Learn what EvtxECmd and SQLECmd Maps are, what RECmd Batch Files are,...

Now Playing

Automating Google Workspace Incident Response | Megan Roddie

Incident responders require a toolset and resources that allow them to...

Now Playing

Order of Volatility in Modern Smartphone Forensics

When dealing with modern smartphone devices, both Android and iOS, we...

Now Playing

Stringlifier: An Open Source Tool for Random String Classification

While shifting from traditional log analysis towards a data...