Blog

DFIR Breakdown: Impacket Remote Execution Activity – atexec

August 29, 2024

DFIR Next Steps: What To Do After You Find a Suspicious Use Of curl.exe

August 19, 2024

DFIR Next Steps: What To Do After You Find a Suspicious Use Of certutil.exe

August 7, 2024

DFIR Breakdown: Using Certutil To Download Attack Tools

July 24, 2024

Access More! BitLocker, new File Explorer, and Export All Files (3.11 release)

June 24, 2024

Limitations of ImpHash for DFIR

Limitations of ImpHash for DFIR

June 20, 2024

Intro to ImpHash for DFIR: “Fuzzy” Malware Matching

June 10, 2024

DFIR Artifacts for a Trojan Defense and Remote Access

June 4, 2024

DFIR Breakdown: Kerberoasting

May 31, 2024

Collecting Linux DFIR Artifacts with UAC

May 23, 2024

How To DFIR Investigate with Cyber Triage and CrowdStrike Real Time Response

May 14, 2024

Adaptive vs Static File Collections for DFIR

May 8, 2024