This week I break down the Windows System Resource Usage Monitor from a DFIR point of view.

This week I cover some malware detection methods for Linux.

This week I talk about different ways to approach windows process triage. There are so many processes, especially in enterprise environments, having a standard approach that is fast and effective is key for security incident response.

This week Jason Roslewicz from SUMURI shares his insights about the impact of artificial intelligence and provides advice for navigating through changing times. 

This week is a Windows artifact breakdown on a common source of evidence.

This week I cover malware on Linux file systems for new examiners.

This week is a guide to understanding SVCHOST from a DFIR point of view. It is one of the most abused Windows processes, and having a firm working knowledge for investigations is essential.

This week is a Windows artifact breakdown on a common source of evidence.

This week I cover the Linux file system for new examiners.

This week I breakdown the elements within a standard CVSS report for fast triage application.