Digital Forensics and Incident Response

AddThis

Showing posts with label Incident Response. Show all posts
Showing posts with label Incident Response. Show all posts
Tuesday, March 14, 2017

Detecting an Attacker Dumping Passwords from the Windows Registry

›
Several tools are available to dump password hashes from the Windows registry such as Mimikatz and gsecdump. Attackers commonly dump domain ...
Sunday, September 11, 2016

Detecting Lateral Movement Using Sysmon and Splunk

›
Detecting an attacker moving laterally in your environment can be tough. It can be difficult to obtain the necessary logs to identify this a...
›
Home
View web version
David French
Incident Responder interested in Digital Forensics and Malware Analysis.
View my complete profile
Powered by Blogger.