Crack up read from the WATCHTOWR team, highly recommend for an educational giggle.
labs.watchtowr.com/more-governm...
09.01.2025 08:47
👍 0
🔁 0
💬 0
📌 0
Crack up read from the WATCHTOWR team, highly recommend for an educational giggle.
labs.watchtowr.com/more-governm...
😂
Happy New Year! 🎉🥳 The first 13Cubed episode of 2025 is here! Let's explore some groundbreaking research from CyberCX on “rewinding the NTFS USN Journal.” www.youtube.com/watch?v=GDc8... #DFIR
I made a windows #DFIR artifacts collection MindMap, it's tough to fit everything into a readable overview (might change later)
Agreed 😄 please refer to the “actually interesting to read content” part of that sentence.
Hey Harlan, are you using flat files for timelines or host analysis?
How do you track DFIR timelines and findings? There doesn't seem to be a one size fits all solution in the industry.
Most commonly used are still spreadsheets, where Crowdstrike actually released a pretty nice IR Tracker template a while ago: www.crowdstrike.com/en-us/blog/c...
OneNote or Microsoft Loop for triage and deeper dive host analysis 🕵️♂️
A slightly modified version of the CrowdStrike Excel Sheet. Aurora IR is an option but I prefer the excel imo
I jest 😂
Where about was this? Planning a surf trip 🌊 I’ve had penguins and seals in NZ but no dolphins… yet
So, the other day I started to whisper and my wife asked why I was whispering? I told her I didn't want Mark Zuckerberg to hear us.
I laughed.
My wife laughed.
Alexa laughed.
Siri laughed.
Can’t beat a good ankle nut
What’s the suggested alternative in your opinion? Agreed Google sucks
Godspeed brave man 🙏
iykyk… 👀
Image of a variety of knives all labeled with a different type of material they are designed for cutting like Ham, Bread, Cheese, etc. At the bottom of the image is a light saber labeled "For people that don't use UTC for logging"
#DFIR #DFIRHumor
Getting injected 💉
Sir please! Some respect.
open.spotify.com/track/25Ozqe...
Getting through ya Monday floating on a cloud listening to this 🌌
Pretty much 🍤
“Genshin Impact” has entered the chat…
That little countdown on 2FA apps stresses the shit out of me. I feel like I'm diffusing a bomb.
If it gets into the red, I just wait. I can't handle the stress.
Tbh screw starter packs… this is the way
