This week I talk about Applocker Bypass from a DFIR point of view.

This week I talk about OWASP's Number 3 vulnerability category from their top 10 list, sensitive data exposure. I explore the issue from a DFIR point of view.

This week I talk about tips for building a threat hunting program.

This week I break down webshells for threat hunting and incident response triage.

This week I talk about contacting Mimikatz through windows event log.

This week I talk about PDF analysis tools to check for malicious indictors in PDFs.

This week I talk about OWASP and why you should be paying attention.

This week I breakdown CRON for the uninitiated.

This week I talk about investigation strategies for logon events.