Help! We need an adult! Engaging an external IR team w/ Liz Waddell - SANS DFIR Summit 2020

Too often, the decision to bring in a third-party forensic team occurs when an incident has reached crisis level. As an Incident Commander for such a team, Liz has seen ...
Active
Too often, the decision to bring in a third-party forensic team occurs...
Active
Over the past 2 years our threat hunting team has made significant...
Active
Unfurl takes a URL and expands ("unfurls") it into a directed graph,...
Active
What if there was a better way? What if examiners could get to critical...
Active
The digital Wellbeing database in Android devices helps users keep...
Active
The Apple HomeKit is an Apple protocol that allows users to communicate...
Active
Effective analysts are those that understand and prioritize files of...
Active
All industries are learning about how to leverage "big data" to make...
Active
Most seasoned forensicators have done some significant things over the...
Active
By default, when we look at forensic artifacts, the action has already...
Active
You need a PROcess to check your running processes and modules. The bad...
Active
As cybercrime has become commonplace, Tor has been the tool of choice...