TechTalkTuesday

Unlock the power of digital forensics with FTK Imager! In this week’s #TechTalkTuesday, we’ll show you how to create disk and memory images using this free and versatile tool. Whether you’re a seasoned cyber investigator or just getting started, this step-by-step guide will help you acquire crucial evidence for forensic analysis, incident response, and cyber threat hunting.

Join us as we explore the best practices for imaging and learn how to extract valuable data from your captures.

Over the past two #TechTalkTuesday we talked through how to build an incident response plan and policy. This week we explore how to build incident response procedures. Procedures are often what people think of when you say IR plan and many considerations need to be made to tailor the incident response procedures to your organization.

Last #TechTalkTuesday we discussed how to build an incident response plan. This week, we pivot into building an incident response policy. The IR policy is the higher, overarching strategy that influences both the incident response plan and procedures. Next week, we will explore IR procedures.

An incident response plan is vital when an attack does impact an organization. In this edition of #TechTalkTuesday, we talk through what incident response plans are and considerations that should be made when drafting incident response plans tailored to an organization.

Aaron Crow went from being OT tech support within a power generation facility to being responsible for cybersecurity, pivoted into consulting, and eventually became the CTO of a cybersecurity company. In this #TechTalkTuesday, he talks about industrial/OT cybersecurity, how he got into the field, how people just starting out can get into the field and common mistakes that asset owners make securing critical infrastructure facilities.

In this week’s #techtalktuesday we continue last week’s series on the free, dynamic analysis tool Process Hacker and explore how to use Process Hacker to explore services and network connection information to enhance your threat hunting, incident response, and cyber security efforts.

Process Hacker is a free and powerful tool for identifying the behaviors associated with an application. In this edition of #TechTalkTuesday, we explore the features of process hacker and discuss how you can use it during your threat hunting and incident response efforts within your cybersecurity program.

User agents are a core part of the HTTP specification and can baseline user activity and behaviors while cyber threat hunting or performing incident response. In this edition of #TechTalkTuesday, we provide an overview of user agents, how to detect three known enumeration tools, and how to detect unknown malicious behavior using user agent analysis.

In this edition of #TechTalkTuesday we explore Window’s advanced audit logging for network connections and talk about how you can leverage Window’s built-in features to discover attackers. We explore success and error event IDs to examine connections, packets, and ports associated with applications and lower-level protocols.