Final call - discount SAVE20 ends tonight!

If you haven’t already, start utilizing our powerful hands-on learning platform now and become an expert in enterprise security and digital forensics!

Secure your spot now: bluecapesecurity.com/courses/

Sentinel one is hiring a DFIR Intern:

sentinelone.com/jobs/?gh_jid=5…

ICYMI- 📆 Exciting News! 🌟 Mark your calendars for an upcoming training session that you won't want to miss! 🚀 @HEXORDIA MOBILE DATA STRUCTURE - VIRTUAL LIVE TRAINING, May 2nd from 8:30 AM to 5 PM EST. 📚 Register today: ow.ly/pZ0p50Qxg6m #DFIR #infosec #CyberSecurity

What time is it, defenders? New lab time, that's what!

🌑 Flaws: Easy, incident response
🐙 Neem: Easy, reverse engineering

Log in or sign up to BTLO today to play: blueteamlabs.online

#BTLO #BlueTeamLabs #IncidentResponse #ReverseEngineering #BlueTeamers #Cybersecurity

If you've had this problem (see pic), NTFS Journal REWIND solves it! . New blog post + code. No more unknown paths.
cybercx.com.au/blog/ntfs-usnj…
#NTFS #DFIR

The Call for Content is now open for BTV at #defcon32 😎 We’re looking for workshops, panels, and hands-on or otherwise interactive content. Got a creative idea that keeps your audience engaged and actively learning how to Blue Team? Submit it today! 🛡️

cfc.blueteamvillage.org/dc32/

Submit your proposal!

sans.org/mlp/dfir-summi…

#dfir

🚨 In this video, we'll explore memory dumps from @hatching_io/Triage sandbox and find #redline stealer unpacked, then use hasherezade's #pebear to fix section alignment to analyze w/ #dnSpyEx and identify config data 👇

⚒️ youtu.be/X0gpApgyS1E

DF examiners, have you heard of iOS walkie talkie apps? Here is my blog on Buz app research.

laurora4n6.wixsite.com/aurora4n6/post…

Dive into the world of Windows Forensics! Master user account analysis, uncover hidden attack trails, and elevate your cybersecurity skills. Get hands-on with real-world techniques today! 🕵️

🔗 ow.ly/IlSK50R941l

🎁 Today I'm giving away 3 of our DFIR Labs! 🎁

To enter:
✅Follow me
✅RT & Like this post
✅Reply with which case you'd like to take

The winners will be selected in 24 hours. #Giveaway

Excellent work as always by Yogesh Khatri #DFIR
Post process your mftecmd results with this!
cybercx.com.au/blog/nfts-usnj…

FREE Challenge: Serpent Stealer 🦠

Investigate the stealer on LetsDefend for free.

🎉New DFIR Discussions Episode🎉

🔊Available on Spotify, Apple, & YouTube!

🎙️We discuss our latest report From OneNote to RansomNote: An Ice Cold Intrusion

Host: ⁠⁠Kostas⁠⁠
Analysts: ⁠⁠Aleks⁠, ⁠IrishDeath⁠, & ⁠Miixxedup⁠
Special Guest: ⁠spencer

APT Emulation Labs: NOW LIVE 🎉

Solve incidents emulating APT29, APT10 and other threat groups.

$45 per month access to ALL labs:
👀 150+ hours of lab content
👀 Disk forensics + ELK logs
👀 Hints, questions and point system
👀 7 days free trial

Labs are created & designed…

🚨 I've put together my first #cheat #sheet around #maldocs , you can download a PDF version from 👇

✅ thecyberyeti.com/quick-referenc…

Covers the tools, common commands, and other information you need to know when analyzing malicious documents, such as Word, OneNote and PDF.

NEW #DFIR #CloudForensics Cheat Sheet
#GoogleWorkspace Artifact Reference Guide by Megantron (@[email protected]) provides a list of events of interest when investigating Google Workspace incidents.
Download now! sans.org/u/1vCm

Exciting news! Week 2 questions are now available for The Weekly CTF Challenge by Hexordia! Watch for updates from our brilliant authors: @b1n2h3x, Kevin 🤖🕵️🍺, GI Jane, and @CQ_DFIR.

Ready to earn points? Join the challenge: ow.ly/nNuw50R5YQ6 #HexWeeklyCTF

Today's Training Tuesday Highlight is The DFIR Report

They provide FREE detailed DFIR Reports on their website that you can learn from: thedfirreport.com

They also recently launched DFIR labs where you can get hands-on access to to report data. You also get CPE credits, a…

#Stark4N6 : Splitwise on iOS #DFIR stark4n6.com/2024/04/splitw…