Black Bag Training Team continues Windows Forensic Essentials Blog Series with a post about forensic examination of Windows Event Logs. They explain what event logs are, how to parse it with their tool – BlackLightÂź, discuss log-on events and changing the date and time.
-
Spotting the Signs of Lateral Movement
Derek King has published another post as part of his “Hunting with Splunk: The Basic… -
How to Deploy Cuckoo Sandbox
Marc Rivero LĂłpez presented a how-to guide that will help you to deploy Cuckoo Sandbox … -
DFIR SQL Query Repository
Alexis Brignoni has started a collection of SQL query templates for digital forensics use,…
Load More Related Articles
-
How to Deploy Cuckoo Sandbox
Marc Rivero LĂłpez presented a how-to guide that will help you to deploy Cuckoo Sandbox … -
How to Disassemble a Word Document with Embedded Macros
Here is a post by Paul Cimino, in which he goes through the steps to create a macro-embedd… -
Linux Binary Poisoning Detection
In this post guys from Sandfly Security describe the process of detection poisoned Linux b…
Load More In How To
