Memory Forensics with Volatility
When a security breach strikes, the instinct to immediately reboot or isolate a compromised machine can inadvertently wipe out your best forensic evi…
DFIR
File Integrity Monitoring (FIM)
File Checksum Integrity Verifier (FCIV) Reference: https://support.microsoft.com/en-us/help/841290/availability-and-description-of-the-file-chec…
Incident Response
Windows Linux RE&CT Framework Reference NIST SP-800-61: Computer Security Incident Handling Guide NIST SP-800-86: Guide…