This week I talk about the Windows Background Activity Monitor, an artifact that may be used to find evidence of execution.

This week I talk about some issues surrounding powershell when used as a digital forensic collection tool.

This week I talk about LOKI, a tool designed to help analyst scan for APT IOCs.

This week I talk about KAPE, a freely available forensic evidence collection and triage tool.

This week I talk about the common Linux file systems and what to expect when dealing with different hosts.

This week I go over how to create a boot disk using the native capability of Ubuntu. You'll never have to rely on third-party tools again!

This week I go over how to create a boot disk using the negative capability of Ubuntu. You'll never have to rely on third-party tools again! You'll never have to rely on third-party tools again!

This week I breakdown container attack vectors for Cloud Incident Response.

This week I breakdown the SUDOERS file for forensic triage.

This week I talk about Powershell through the lens of the Service Control Manager.