TechTalkTuesday Archives

How To Use FTK Imager To Take Disk And Memory Images For Free

Unlock the power of digital forensics with FTK Imager! In this week’s #TechTalkTuesday, we’ll show you how to create disk and memory images using this free and versatile tool. Whether you’re a seasoned cyber investigator or just getting started, this step-by-step guide will help you acquire crucial evidence for forensic analysis, incident response, and cyber threat hunting.

Join us as we explore the best practices for imaging and learn how to extract valuable data from your captures.

IR Plan, Policy & Procedures Part 3: How To Write a Cybersecurity Incident Response Procedures

Tech Talk Tuesday

Over the past two #TechTalkTuesday we talked through how to build an incident response plan and policy. This week we explore how to build incident response procedures. Procedures are often what people think of when you say IR plan and many considerations need to be made to tailor the incident response procedures to your organization.

IR Plan, Policy & Procedures Part 2: How To Write a Cybersecurity Incident Response Policy

Tech Talk Tuesday

Last #TechTalkTuesday we discussed how to build an incident response plan. This week, we pivot into building an incident response policy. The IR policy is the higher, overarching strategy that influences both the incident response plan and procedures. Next week, we will explore IR procedures.

IR Plan, Policy & Procedures Part 1: How To Write a Cybersecurity Incident Response Plan

Tech Talk Tuesday

An incident response plan is vital when an attack does impact an organization. In this edition of #TechTalkTuesday, we talk through what incident response plans are and considerations that should be made when drafting incident response plans tailored to an organization.

Breaking Into Industrial Cybersecurity: What It Is, How To Get Into The Field, And Common Mistakes

Tech Talk Tuesday

Aaron Crow went from being OT tech support within a power generation facility to being responsible for cybersecurity, pivoted into consulting, and eventually became the CTO of a cybersecurity company. In this #TechTalkTuesday, he talks about industrial/OT cybersecurity, how he got into the field, how people just starting out can get into the field and common mistakes that asset owners make securing critical infrastructure facilities.

How To Use Process Hacker to Explore Malicious Service and Network Activity During DFIR/Threat Hunts

Tech Talk Tuesday

In this week’s #techtalktuesday we continue last week’s series on the free, dynamic analysis tool Process Hacker and explore how to use Process Hacker to explore services and network connection information to enhance your threat hunting, incident response, and cyber security efforts.

How To Use Process Hacker to Find Intrusions During Incident Response and Threat Hunting Engagements

Tech Talk Tuesday

Process Hacker is a free and powerful tool for identifying the behaviors associated with an application. In this edition of #TechTalkTuesday, we explore the features of process hacker and discuss how you can use it during your threat hunting and incident response efforts within your cybersecurity program.

How To Use User Agents to Save The World (And Improve Cyber Threat Hunting and Detection)

Tech Talk Tuesday

User agents are a core part of the HTTP specification and can baseline user activity and behaviors while cyber threat hunting or performing incident response. In this edition of #TechTalkTuesday, we provide an overview of user agents, how to detect three known enumeration tools, and how to detect unknown malicious behavior using user agent analysis.

How To Use Window’s Advanced Network Connection Audit Logging to Detect and Hunt for Cyber Attackers

Tech Talk Tuesday

In this edition of #TechTalkTuesday we explore Window’s advanced audit logging for network connections and talk about how you can leverage Window’s built-in features to discover attackers. We explore success and error event IDs to examine connections, packets, and ports associated with applications and lower-level protocols.

How To Detect Malicious Network Share Usage With The Windows Event Logs When Threat Hunting

Tech Talk Tuesday

How To Detect Malicious Network Share Usage With The Windows Event Logs When Threat Hunting Description In this edition of #TechTalkTuesday we discuss the detection of malicious network share usage with the Windows Event Logs when threat hunting. By understanding what malicious network share activity looks like, you can quickly and easily investigate potential threats. …

How To Detect Malicious Network Share Usage With The Windows Event Logs When Threat Hunting Read More »