Journey Into Incident Response

Holding the Line

Sunday, November 22, 2015

Triage Practical – Malware Event – Prefetch $MFT IDS

›
Another Monday morning as you stroll into work. Every Monday morning you have a set routine and this morning was no different. You were hopi...
7 comments:
Wednesday, November 18, 2015

Adding an Event Triage Drop to the Community Bucket

›
By failing to prepare, you are preparing to fail. ~ Benjamin Franklin Let's also stop saying if company X looked into their alerts t...
5 comments:
Saturday, November 7, 2015

Random Thoughts

›
Things have been quiet on jIIr since I over committed myself. The short version is I had zero time for personal interests outside of my comm...
8 comments:
Sunday, August 23, 2015

A Warning about Hidden Costs

›
I saw the excitement in my son's eyes as the biggest smile was stretching from ear to ear. He slowly stretched out his arm to show me wh...
3 comments:
Wednesday, August 12, 2015

Go Against the Grain

›
“You never change things by fighting the existing reality. To change something, build a new model that makes the existing model obsolete.” —...
Monday, August 10, 2015

Minor Updates to Auto_rip

›
This is a quick post to pass along that I updated my auto_rip script . For those who may not know, auto_rip is a wrapper script for Harlan C...
5 comments:
Sunday, July 26, 2015

SIEM – One Year Later

›
We are overwhelmed with data and are not sure what to look at or collect? I came across this paraphrased comment in a SIEM forum and it echo...
1 comment:
‹
›
Home
View web version
Powered by Blogger.