Written by Will Gibb & Devon Kerr In our blog post "Investigating with...
Read moreWritten by Devon Kerr & Will Gibb The Back to Basics: OpenIOC blog series previously discussed how ...
Read moreOpenIOC: Back to the Basics
October 1 2013Written by Will Gibb & Devon Kerr One challenge investigators face during incident response is finding a way to ...
Read moreThe History of OpenIOC
September 17 2013With the buzz in the security industry this year about sharing threat intelligence, it's easy to get caught up in the hype, and ...
Read moreBack to Basics Series: OpenIOC
September 12 2013Over the next few months, a few of my colleagues and I will be touching on various topics related to Mandiant and computer ...
Read moreAs a follow-up to our recently held State of the Hack: Back to the Remediation webinar,...
Read moreIncident Response with NTFS INDX Buffers – Part 4: The Internal Structures of an INDX Attribute
October 16 2012By Jeff Hamm & William Ballenthin On August 30th, 2012, we presented a webinar on how to use INDX buffers to assist in an ...
Read moreIncident Response with NTFS INDX Buffers – Part 3: A Step by Step Guide to Parse INDX
October 10 2012By William Ballenthin & Jeff Hamm Our last post in the Incident Response with NTFS INDX Buffers series detailed the internal...
Read moreIncident Response with NTFS INDX Buffers – Part 2: The Internal Structures of a File Name Attribute
September 26 2012By Jeff Hamm & William Ballenthin Last week on M-Unition, Willi and I published the first post in...
Read more
Recent Comments