After breaking my SANS Linux SIFT environment today while doing a Forensic CTF from pico CTF, (not their fault, it was mine by trying to upgrade sleuth kit) I decided to rebuild. I use the SIFT VM for a lot…
APT40 has been on the radar for many years, causing significant disturbances within the cybersecurity community. Believed to be a Chinese state-sponsored group, they’ve been active since at least 2009, likely operating under the Ministry of State Security (MSS). Their…
Phishing attacks are a classic in the cybersecurity world, but they are far from outdated. Despite advancements in technology and user awareness, phishing remains one of the most prevalent and successful attack vectors. In this post, we’ll explore why phishing…
Host-based digital forensics is just one aspect of investigating cyber security incidents with a lens on the investigation and analysis of individual computers and devices. This is in contrast to Network forensics which is focused on network logs and packet…
Without being a pessimist, as I am at my core an optimist, it is not a matter of if you will be breached, but when. It is a reality that vendors face when they are deploying the latest security tool…
Understanding Digital Forensics Digital forensics involves the recovery and investigation of material found in digital devices (Windows or Linux computers, smartphones and legacy mobile phones and now, even cars) often in relation to computer crime, cyber intrusions and insider threats.…
Detection: Recognizing the Signs of an Incident Detection is the first crucial step in handling security incidents. The effectiveness of detection largely depends on the tools and systems you have in place, such as Intrusion Detection Systems (IDS), Intrusion Prevention…
Detecting cybersecurity incidents effectively involves multiple layers of detection, which can vary based on the tools and configurations you have in place. This includes intrusion detection systems (IDS), intrusion prevention systems (IPS), next-gen firewalls, EDR and native capabilities like the…
If you’re considering a career in cybersecurity, now is an excellent time to dive into this dynamic and ever-evolving field. With an abundance of training options available, you can find resources that suit your budget and learning preferences. Diverse Training…
In DFIR, one of the worst situations is facing a cyber incident unprepared. Imagine the chaos (or don’t, as it’s a reminder of the last big incident) when you’re looking at the incident response playbook for the first time during…