Category: Digital Forensics
Tags: memory-forensics, volatility, ram-analysis, malware-analysis, process-injection
Disk forensics tells you what was saved. Memory forensics tells you what was running. The distinction matters...
Category: Digital Forensics
Tags: memory-forensics, volatility, ram-analysis, malware-analysis, process-injection
Disk forensics tells you what was saved. Memory forensics tells you what was running. The distinction matters...
Category: Digital Forensics
Tags: malware-analysis, sandboxing, reverse-engineering, powershell, static-analysis, dynamic-analysis
There are two types of people in cybersecurity: those who see a suspicious executable and immediately...
Category: Digital Forensics
Tags: memory-forensics, volatility, ram-analysis, malware-analysis, process-injection
Disk forensics tells you what was saved. Memory forensics tells you what was running. The distinction matters...
Series: Incident Response | Reading time: ~12 minutes | Author: Tech Corsair
Introduction: Why Every Organisation Needs a Plan (Yes, Even Yours)
There is a special...
Series: Incident Response | Reading time: ~14 minutes | Author: Tech Corsair
Introduction: The Crime Scene Analogy That Never Gets Old
Imagine a crime scene. Police...
Category: Incident Response
Tags: phishing, email-forensics, incident-response, social-engineering, headers
Every SOC analyst has a queue full of "is this phishing?" tickets. The answer is almost always...
Series: Incident Response | Reading time: ~15 minutes | Author: Tech Corsair
Introduction: Deep Breaths, Everyone
It is 6:47am on a Monday. The helpdesk phone is...
Category: Incident Response
Tags: network-forensics, pcap, wireshark, zeek, netflow
Host-based forensics tells you what happened on a machine. Network forensics tells you what happened between machines...
Recent Comments