Asfand Gul Kasi·2d agoUser Accounts and Security on Mobile Devices, Windows and LinuxBy: Asfand Gul KasiA response icon3A response icon3
駱冠宇 / Bill Lo·Oct 30Reconstructing a Windows Data Breach: The Case of the Stolen Szechuan SauceA solo digital forensics investigation of DFIR Madness Case 001: how disk images, event logs, registry hives, and a packet capture piece…
InILLUMINATIONbyKongkham Singh·Oct 21🔍 Keyloggers 🕵️♂️What They Are, How to Investigate Them, and How to Protect YourselfA response icon2A response icon2
Robert Broeckelmann·Oct 18Windows Security Through the Ages — Because a Login Prompt Isn’t a Security BoundaryAnyone that has been reading my posts for a while knows that I like to explore the history of what led to the current state of a…
Anthony Bahn·Oct 16How to Use Patch Deployment Rings for a Windows Zero-DayPatch the users attackers reach first, advance on written criteria, and verify coverage with two signals.
Bridget·Oct 14A SOC Odyssey — Windows Event IDs: CyberHER LabsInvestigating a Compromised Windows Workstation: My CyberHER SOC Lab: Documenting my cybersecurity learning journey through Windows Event…
Digvijay·Oct 12Detecting Credential Access Before Ransomware SpreadsEncryption is the visible part of a ransomware incident.
Hritick Modak·Oct 12Memory Analysis-LetsDefend ChallengeThis is my first blog on Medium, and I’m excited to share my learning journey with you.
Bhoyarlokesh·Oct 8Investigating PowerShell Execution: A Deep Blue-Team Investigation GuideUnderstanding PowerShell execution, Windows forensic artifacts, event logs, process trees, Script Block Logging, and how SOC analysts…
Digvijay·Oct 8Killing Recovery Before Encryption: How Ransomware Removes Your Safety NetRansomware is not only about locking files.
