Digital Forensic Survival Podcast

This week I interview Steve Whalen from SUMURI about the current Mac Forensic landscape

This week I interview a DFIR practitioner about some of the little known facts about a career in the industry.

This week I talk about resolving USB usage back to specific systems and user accounts.

This week I talk about Mac Logs, namely the new Unified Logging in OS X and how this impacts forensic exams.

This week I talk about Windows Explorer evidence.

This week I interview a DFIR professional about his decision to get a Masters Degree in cyber security.

This week I review a document put out by the Japan Computer Emergency Response Team Coordination Center on "Detecting La... Read more

This week I talk about SOF ELK, a freely available pre-built virtual appliance for DFIR work

This week I do a tool review of CYLR and CDQR - perhaps the easiest way to build an awesome timeline

This week I talk about RTFM, the companion to the blue team field manual that's filled with over 1000 commands for windo... Read more

This week I talk about investigation strategies for logon events.

This week I go over OSX Collector, a freely available tool to collect and preprocess Mac artifacts for DFIR investigatio... Read more

This week I break down crypto currency concepts for new computer forensic examiners.

This week I talk a Notepad++, a freely available code editing tool with some great options built in that are useful for ... Read more

This week I talk about tips for building a threat hunting program.

This week I talk about the security changes coming with iOS 11.4

This week I talk about PDF analysis tools to check for malicious indictors in PDFs.

This week I talk about incident response in container deployments.

This week I talk about PIDS in their uses and computer forensic investigations.

This week I talk about DNS and forensics