Building Better CSIRTs Using Behavioral Psychology
Explore behavioral psychology insights to improve CSIRT effectiveness, addressing team dynamics, communication, and collaboration challenges for enhanced incident response.
Next-Gen DFIR - Mass Exploits & Supplier Compromise
Explore real-world cases of large-scale cyber incidents, focusing on service and software provider compromises. Learn to adapt DFIR processes for global threats and improve incident visibility.
What the Log - So Many Events, So Little Time
Explore Windows Event Log for efficient adversary detection, leveraging automation and MITRE ATT&CK framework to enhance cybersecurity monitoring and response capabilities.
Real-Time Detection of Attacks Leveraging Domain Administrator Privilege
Discover a real-time method to detect attacks using Domain Administrator privileges, including Golden Tickets, through Domain Controller Event logs for immediate threat mitigation.
Network Defender Archeology - An NSM Case Study in Lateral Movement with DCOM
Explore DCOM as a lateral movement technique from attacker and defender perspectives, addressing knowledge gaps and providing methodical insights for network security professionals.
The Cyber Safety Review Board - Studying Incidents to Drive Systemic Change
Explore the Cyber Safety Review Board's analysis of the Log4j vulnerability, key findings, and recommendations for industry and government to enhance cybersecurity and drive systemic change.
Backdoor Investigation and Incident Response - From Zero to Profit
Uncover how attackers breached an online gaming company, exploited a database backdoor, and manipulated transactions. Learn detection methods and incident response strategies for similar cyber attacks.
SideWinder Uncoils to Strike
Explore the aggressive SideWinder threat actor's tactics, infection chain, and infrastructure. Learn about their evolving techniques and effective mitigation strategies.
10 Things I Wish I Knew Before My First Incident
Essential insights for effective incident response, covering crucial aspects often overlooked by beginners. Learn from real-world experiences to enhance your preparedness and decision-making during critical cybersecurity events.
From False Positives to Actionable Analysis
Modeling human behavior in network traffic to automatically label security events, using distributed forensic AI for threat detection and response optimization.
The Tactical Application Security Program - Getting Stuff Done
Aprenda a implementar um programa de segurança tático e eficaz, focando em avaliações ágeis, resposta a incidentes e gerenciamento de bugs. Descubra por que abordagens táticas podem ser mais efetivas que estratégias de longo prazo.
The Tactical Application Security Program - Getting Stuff Done
Practical approach to application security: lightweight team, agile methods, and operational excellence. Covers assessments, bug handling, and private bug bounty programs, with actionable advice for managers and practitioners.
The Evolution of Incident Response
Explore the evolution of cybersecurity incident response with expert Kevin Mandia, covering key developments, strategies, and best practices in handling digital threats.
How Do I Detect Technique X in Windows - Applied Methodology to Definitively Answer This Question
Learn a systematic approach to detect specific techniques in Windows, enhancing your ability to identify and analyze potential security threats and vulnerabilities.
Server Message Block Worms - The Gift That Keeps on Giving
Explore Server Message Block (SMB) worms, their exploitation, and incident response strategies. Learn detection, containment, and prevention techniques for enhanced network security.
Exercise Your SOC - How to Run an Effective SOC Response Simulation
Learn effective techniques for conducting SOC response simulations to enhance your security team's readiness and improve incident handling capabilities.
The Fox is in the Henhouse - Detecting a Breach Before the Damage is Done
Detect network breaches early using visibility tools, data analysis, and real-time decision-making. Learn to choose and integrate security solutions for proactive threat response.
Fluency - How Big Data is Changing Incident Response
Explore how big data transforms incident response, comparing traditional methods with modern data analysis techniques for enhanced cybersecurity and threat detection.
Cyber 101 - Upstaring Your Career in a Leading Industry
Explore cybersecurity career paths, industry insights, and essential skills. Learn about market value, job roles, and how to enter this dynamic field from an experienced professional.
Forensicating Windows Artifacts - Investigation Without Event Logs
Discover essential Windows artifacts for forensic investigations without event logs. Learn to leverage prefetch files, registry keys, and browser data for effective incident response.
Security Lessons from Dictators
Explore network security through historical dictators' mistakes. Learn to defend against insider threats, improve incident response, and enhance security awareness in organizations.