Journey Into Incident Response
Holding the Line
Sunday, November 22, 2015
Triage Practical – Malware Event – Prefetch $MFT IDS
›
Another Monday morning as you stroll into work. Every Monday morning you have a set routine and this morning was no different. You were hopi...
7 comments:
Wednesday, November 18, 2015
Adding an Event Triage Drop to the Community Bucket
›
By failing to prepare, you are preparing to fail. ~ Benjamin Franklin Let's also stop saying if company X looked into their alerts t...
5 comments:
Saturday, November 7, 2015
Random Thoughts
›
Things have been quiet on jIIr since I over committed myself. The short version is I had zero time for personal interests outside of my comm...
8 comments:
Sunday, August 23, 2015
A Warning about Hidden Costs
›
I saw the excitement in my son's eyes as the biggest smile was stretching from ear to ear. He slowly stretched out his arm to show me wh...
3 comments:
Wednesday, August 12, 2015
Go Against the Grain
›
“You never change things by fighting the existing reality. To change something, build a new model that makes the existing model obsolete.” —...
Monday, August 10, 2015
Minor Updates to Auto_rip
›
This is a quick post to pass along that I updated my auto_rip script . For those who may not know, auto_rip is a wrapper script for Harlan C...
5 comments:
Sunday, July 26, 2015
SIEM – One Year Later
›
We are overwhelmed with data and are not sure what to look at or collect? I came across this paraphrased comment in a SIEM forum and it echo...
1 comment:
‹
›
Home
View web version