Week 16 - 2024 #DFIR

thisweekin4n6.com/2024/04/21/wee…

Awesome #DFIR guide!

microsoft.com/en-us/security…

Our two-week #BCFE classroom is filled with over 300 students here at #IACISOrlando2024 and kicked off with a great start today. This video of the room doesn't do it justice!
.
.
.
#dfir #digitalforensics #training #conference #cfce

A Microsoft publicou um novo guia para resposta a incidentes em sistema Windows. Uma mão na roda pra ajudar a consulta nas investigações. E o melhor é ter vindo de vias oficiais.
Galera do DFIR, leiam!!
microsoft.com/en-us/security…

🌟New report out Monday 4/29 by Renzon, Angelo Violetti & UC1!

📷 This intrusion began with an IcedID phishing campaign and ends with domain wide ransomware.

Want to receive an email when a new report comes out? Subscribe ⬇️

thedfirreport.com/subscribe/

NEW POSTER RELEASED!
#DFIR Fundamentals poster will help you identify the data that you might need to analyze, determine where that data resides, & formulate a plan & procedures for the best way to collect & preserve that data
Download now! sans.org/u/1vaR
#ThinkDFIRently

*Vendor Night Tonight!*
Vendor Night at #IACISOrlando will feature Cellebrite Training and David Webb Notes! Forensic Notes will be giving all Students and Staff a year of Forensic Notes AND Forensic OSINT Software. Cellebrite raffles are detailed below.
.
#dfir #training

Don't miss out on our Mobile Data Structures Virtual Live Course happening on Wednesday, May 2nd, from 8:30 AM to 5 PM EST! 📱 Check out the glowing testimonial from @‌i_am_the_gia Register today: ow.ly/sNZy50Qxg6l #DFIR #infosec #CyberSecurity

𝐈𝐀𝐂𝐈𝐒 𝟐𝟎𝟐𝟒 𝐕𝐨𝐥𝐮𝐧𝐭𝐞𝐞𝐫𝐬

Volunteers form the very heart and soul of IACIS, embodying our commitment to excellence and innovation.

Thank you to each and every individual who has made the 2024 Orlando Training Event possible!

#dfir #volunteer #humansofiacis

Investigation Scenario 🔎

You’ve discovered regsvr32.exe running from the C:\Users\Username\Appdata\Roaming directory on a Windows system.

What do you look for to investigate whether an incident occurred?

#InvestigationPath #DFIR #SOC

Thread com um breve review dos últimos livros que eu li, dos mais basicos aos mais complicados, focados em DFIR 📚
#bolhasec

You 𝙨𝙖𝙞𝙙 you didn’t 𝙙𝙤𝙬𝙣𝙡𝙤𝙖𝙙 that 𝙩𝙝𝙞𝙣𝙜.
The DFIR team determined that was a lie.

.Microsoft Security released a guide for IR analysts, breaking down specific artifacts and pitballs too #DFIR microsoft.com/en-us/security…

Anlık olarak global çapta ransomware saldırılarını takip edebileceğiniz sayfamız yayına alındı.

drdisklab.com/global-ransomw…

#ransomware #cyberattack #cybercrime #cyberdefense #infosec #dfir #hacking

Hidden files and Alternate Data Streams in Windows - what are the Digital Forensics and Incident Response implications.

youtu.be/p16Gatbav-E

#dfir #cybersecurity

How pass the ticket 🎫 with constrained delegation works.

#ThreatHunting #DFIR

#PSBK2E Tip #392: One simple idea is sometimes all it takes to move your case forward.

That simple idea could come from a single paragraph in a forensic book, 10 minutes of an 80-hour #DFIR training course, or from the co-worker sitting next to you.

The Free & Affordable Training site (training.dfirdiva.com) was created to help people find quality free and low cost training across various platforms. The main focus is DFIR / Blue Team Training. Nothing listed is over $1,000.

The Training Categories are as Follows

Core