This week I go over how to create a boot disk using the negative capability of Ubuntu. You'll never have to rely on third-party tools again! You'll never have to rely on third-party tools again!

This week I breakdown container attack vectors for Cloud Incident Response.

This week I breakdown the SUDOERS file for forensic triage.

This week I talk about Powershell through the lens of the Service Control Manager.

This week I talk about NVMe, a data storage technology, from a forensic point of view.

This week I cover how to approach Linux binaries during investigations.

This week I continue the series about the DFIR changes on the horizon with cloud technology and focus on AWS EC2 forensics.

This week I talk about using WMI to create processes remotely.

This week I talk about Density Scout, an open source tool for malware triage.

This week I cover a resource you can use to develop windows remote execution triage methodology and threat hunting.