THE CYBER TRIAGE BLOG
Learn investigation tips from Brian Carrier and the Sleuth Kit Labs Team.
Recent Posts
Collecting Linux DFIR Artifacts with UAC
May 23, 2024
Adaptive vs Static File Collections for DFIR
May 8, 2024
Windows Scheduled Tasks for DFIR Investigations
February 28, 2024
DFIR Next Steps: What To Do When You Find Mimikatz Was Run
January 24, 2024
3.9 introduces our first incident-level analysis features!
December 5, 2023
EDRs don’t collect all DFIR artifacts,
but they can help you do it
December 4, 2023
