The Problem and the Solution The current method of doing forensics is slow and outdated. One at a time triage or disk forensics may work okay when you only have a handful of endpoints, but… Read More »Introducing Sniper Incident Response
Theres nothing like the adrenaline rush of being onsite and starting a new case. Going through fresh data, trying to find the bad guy, hunting an active attacker and stopping them in their tracks is… Read More »Questions are the answer
The first time I responded to a breach solo was just a few months after starting my career as a DFIR consultant. I flew out early morning from Arizona across the country to New Jersey… Read More »Your first onsite IR
One of the major differences between working corporate security vs consulting is the interaction with customers. When you work in a SOC or CIRT, most of your work is done with members of your team… Read More »Just what is a Scoping Call?