Episode 3 - NIST SP 800-61 Computer Security Incident Handling Guide (Detection) TLP - The Digital Forensics podcast

Artwork

Tech Clint Marsden DFIR Incident Response Forensic Cyber Windows Hacking Blue Teaming Red Team Auscert

Indhold leveret af Clint Marsden. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af Clint Marsden eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

TLP - The Digital Forensics Podcast « »
Episode 3 - NIST SP 800-61 Computer Security Incident Handling Guide (Detection)

4M ago 50:07

Del

MP3•Episode hjem

Indhold leveret af Clint Marsden. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af Clint Marsden eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

In this 45 minute episode Clint covers a lot of ground based on the Detection phase of NIST 800-61.
Attack vectors for digital security incidents, including insider threats and weaponized USBs.
Cybersecurity incident response and detection, including NIST guidelines and Sysmon logging augmentation
The importance of following temporal linearity in Forensic Investigations, expanding analysis to 5-10 minutes prior to and after events, particularly in Internet History and Memory Dumps
Building a baseline of activity through network pcaps and log analysis
Why synchronised clocks are important?
How detailed notes help in your investigations

Subscribe to our newsletter at forensicnewsletter.com to receive your FREE guide: Mastering Sysmon: Deploying, Configuring and Fine-Tuning in 10 easy steps.

… continue reading

15 episoder

#Tech #Clint Marsden #DFIR #Incident Response #Forensic #Cyber #Windows #Hacking #Blue Teaming #Red Team #Auscert

Artwork

Episode 3 - NIST SP 800-61 Computer Security Incident Handling Guide (Detection)

TLP - The Digital Forensics Podcast

published 4M ago

Del

MP3•Episode hjem

Indhold leveret af Clint Marsden. Alt podcastindhold inklusive episoder, grafik og podcastbeskrivelser uploades og leveres direkte af Clint Marsden eller deres podcastplatformspartner. Hvis du mener, at nogen bruger dit ophavsretligt beskyttede værk uden din tilladelse, kan du følge processen beskrevet her https://da.player.fm/legal.

In this 45 minute episode Clint covers a lot of ground based on the Detection phase of NIST 800-61.
Attack vectors for digital security incidents, including insider threats and weaponized USBs.
Cybersecurity incident response and detection, including NIST guidelines and Sysmon logging augmentation
The importance of following temporal linearity in Forensic Investigations, expanding analysis to 5-10 minutes prior to and after events, particularly in Internet History and Memory Dumps
Building a baseline of activity through network pcaps and log analysis
Why synchronised clocks are important?
How detailed notes help in your investigations

Subscribe to our newsletter at forensicnewsletter.com to receive your FREE guide: Mastering Sysmon: Deploying, Configuring and Fine-Tuning in 10 easy steps.

… continue reading

15 episoder

#Tech #Clint Marsden #DFIR #Incident Response #Forensic #Cyber #Windows #Hacking #Blue Teaming #Red Team #Auscert

Tutti gli episodi

×

Velkommen til Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

Lyt til 500+ emner