Digital Forensic Survival Podcast

This week I talk utilizing the ExploitDB for DFIR investigations. Searchsploit is a command line search tool for Exploit-DB that allows you the power to perform detailed off-line searches through your locally checked-out copy of the repository. This capability is particularly useful for security assessments on segregated or air-gapped networks without Internet access.

This week I talk about the IR Investigation Lifecycle, or, the elements included within the incident handling process to ensure a complete investigation.

This week I talk about the use of RUNDLL32 to exploit information files (.INF) to "fetch and execute" malware.

This week I talk about detecting time stomping on Windows and Linux systems.