Digital Forensics and Incident Response

AddThis

Sunday, September 25, 2016

How to Setup a Cowrie SSH Honeypot

›
Cowrie is a medium interaction SSH and Telnet honeypot, which can log brute force attacks and an attacker's shell interaction. Cowrie is...
8 comments:
Sunday, September 11, 2016

Detecting Lateral Movement Using Sysmon and Splunk

›
Detecting an attacker moving laterally in your environment can be tough. It can be difficult to obtain the necessary logs to identify this a...
Saturday, September 10, 2016

Mounting a BitLocker Encrypted Image Using Dislocker

›
Sometimes it is necessary to boot a host into an alternate OS to acquire a raw disk image. If you need to mount the image for forensic analy...
‹
Home
View web version
David French
Incident Responder interested in Digital Forensics and Malware Analysis.
View my complete profile
Powered by Blogger.