Forensic Lunch 4/10/20 with Belkasoft, AWS IR Automation, MVS DFIRFIT and HTTP Security Headers
The Forensic Lunch with David Cowen and Matthew Seyer
Release Date: 04/15/2020
The Forensic Lunch with David Cowen and Matthew Seyer
The Forensic Lunch! This week with Willi Ballenthin from the Mandiant FLARE Team talking about their tools
info_outlineThe Forensic Lunch with David Cowen and Matthew Seyer
The Forensic Lunch! This week with Sarah Edwards and Jared Barnhart talking about iphone testing labs, app testing and decoding apple photos machine learning identified photo metadata
info_outlineThe Forensic Lunch with David Cowen and Matthew Seyer
Forensic Lunch! This week with Jordan Barth talking about Azure and the Cloud!
info_outlineThe Forensic Lunch with David Cowen and Matthew Seyer
Forensic Lunch! This week it's time for the second Annual National Collegiate Cyber Defense Competition Redteam AMA!
info_outlineThe Forensic Lunch with David Cowen and Matthew Seyer
Forensic Lunch! This week with Google Incident Response Management Team! Learn how Google does IR Management and hear from Joachim Metz, James Nettesheim, Matt Linton and Alex Jager
info_outlineThe Forensic Lunch with David Cowen and Matthew Seyer
Forensic Lunch! This week with Eric Zimmerman showing SQLite Explorer and Javier Marcos discussing OSCtrl for OSQuery
info_outlineThe Forensic Lunch with David Cowen and Matthew Seyer
Forensic Lunch! This week with Yogesh Kahtri talking about MAC_APT, Brian Moran and Yuri Gubanov from Belkasoft
info_outlineThe Forensic Lunch with David Cowen and Matthew Seyer
Forensic Lunch! This week with Michael Cohen doing an hour and a half of Velociraptor!
info_outlineThe Forensic Lunch with David Cowen and Matthew Seyer
The Forensic Lunch! This week we are bringing Jad Saliba and Jessica Hyde from Magnet talking about the month of great content they've been hosting and the new things coming out of Magnet. In addition we will have the winner of the Magnet Virtual CTF 2020!
info_outlineThe Forensic Lunch with David Cowen and Matthew Seyer
This week on the Forensic Lunch we had: Josh Brunty, , talking about his DFIR program at Marshall of Blackberry Cyclance and Jim Arnold of KPMG talking about recent ransomware trends. Kevin Pagano, , talking about his Sunday Funday and the Magnet Virtual CTF Jack Farley, , talking about MEAT and the Magnet Virtual CTF You can watch it here:
info_outlineWhat a great Forensic Lunch today!
On today's broadcast we had:
Yuri Gubanov (@belkasoft) giving an update about whats going on at Belkasoft. Including their IOS 13.4 full file system acquisition using Checkm8, their new IR module in Belkasoft Evidence Center and a neat capability to do managed remote logical phone collections.
Steve Gibson and Spencer Hendee (@stevegibson) from KPMG (disclaimer I work there too!) came on to discuss the really cool AWS Cloud IR Automation we've been working on.
Brian Moran (@brimorlabs) social media maven and principal of BriMorLabs came on to discuss the Magnet Virtual Summit DFIRFIT 2020 where for a donation (and some excercise) you can get a cool prize pack shipped to you anywhere in the world! Register here: https://mvsdfirfit2020.com
Caleb Queern (@HttpSecHeaders) also of KPMG came on to discuss the clearsite HTTP header. This was interesting as its a directive a website can give to a browser to tell it to clear/not store history or data about it. This will need to be tested, you can read more here https://w3c.github.io/webappsec-clear-site-data/
So great stuff this week, you can watch below. Otherwise next week we've already confirmed Zach Wasserman to come and talk about OSQuery and Kollide!