Blue Teaming Incident Response for the Win
Explore effective blue team incident response strategies to enhance cybersecurity defenses and mitigate threats in this informative session.
Trust and Security - The Odd Couple Driving Your Business
Explore the interplay between trust and security in business, focusing on communication strategies, incident response, and balancing security measures with trust-building efforts.
Zoom Zero Day - How Not to Handle a Vulnerability Report
Explore the mishandling of a Zoom vulnerability report, examining the consequences and lessons learned for improved cybersecurity practices and responsible disclosure.
Understanding Why Breaches Occur
Explore the root causes of cybersecurity breaches and gain insights into prevention strategies from industry experts John Survant and Don Wolfe.
Table Top Jeremy Mio
Explore tabletop exercises for cybersecurity incident response, covering agenda, objectives, charters, and ransomware scenarios to enhance organizational preparedness.
Lend Me Your IRs
Explore incident response techniques and best practices for effective cybersecurity management in this informative presentation by Matt Scheurer at BSides Cleveland 2021.
Lend Me Your IRs
Explore incident response strategies and best practices for effective cybersecurity management in this informative conference talk by Matt Scheurer.
Becoming an IR Superstar
Learn essential skills and strategies to excel in Incident Response, enhancing your ability to handle cybersecurity threats effectively and become a standout professional in the field.
The Day I Broke React Native
Dive into the incident that broke React Native builds worldwide. Learn about internal processes, incident response, and future safeguards from a core team member's perspective.
Managing Chaos at Scale
Explore Uber's strategies for maintaining reliability amid rapid growth, covering incident prevention, response, and the benefits of common frameworks in reliability engineering.
AutoARTS - Taxonomy, Insights and Tools for Root Cause Labelling of Incidents in Microsoft Azure
Comprehensive study on incident root causes in Microsoft Azure, proposing a novel hierarchical taxonomy and automated labeling tool to improve postmortem analysis and prevent future incidents.
Investigating Windows Subsystem for Linux - WSL Endpoints
Explore forensic artifacts and investigation techniques for compromised Windows Subsystem for Linux (WSL) endpoints, covering attacker techniques and architectural changes relevant to digital forensics professionals.
Using Past Data to Determine Relevance in Autopsy
Explore Autopsy's File Discovery UI and Central Repository for efficient digital forensics. Learn how past data analysis enhances file prioritization and streamlines investigations.
Autopsy's Year in Review - OSDFCon
Comprehensive overview of Autopsy's latest features, including new interfaces and analysis modules, highlighting advancements in digital forensics and incident response capabilities.
Putting Together the RDPiece
Explore RDP Bitmap Cache forensics for ransomware investigations. Learn to extract, analyze, and reconstruct crucial evidence often overlooked in digital forensics and incident response.
Effectively Using RegRipper 3.0
Explore efficient techniques for utilizing RegRipper 3.0 in digital forensics and incident response, presented by experienced DFIR professional Harlan Carvey at OSDFCon 2020.
Where Have UAL Been?
Explore Microsoft's User Access Logs on Windows Servers, including authentication details, record retention, and parsing tools. Learn how these logs can be utilized in digital forensics and incident response.
Incident Recorder
Demonstration of an open-source automation tool for Security Incident recorders, designed to track and document incidents efficiently for forensic and legal purposes.
ARTHIR - ATT&CK Remote Threat Hunting Incident Response Windows Tool
Modular framework for remote threat hunting and incident response on Windows systems, mapping capabilities to MITRE ATT&CK Framework. Improves on Kansa with expanded functionality and community collaboration.
A Golden Ticket to the Cloud
Explore cloud security threats, including the Golden SAML attack, and learn detection strategies using open-source tools to protect against unauthorized access in cloud environments.
Velociraptor - Dig Deeper
Explore Velociraptor's powerful VQL for efficient DFIR hunting at scale. Learn to perform on-endpoint analysis, create custom detections, and implement real-time monitoring rules for rapid incident response.