Incident Response

DFIR, Digital Forensics, Incident Response, Triage. Are they all the same?

Apr 3, 2023 · 2 min read · Incident Response Digital Forensics Opinion ·

Over recent months i have noted that the term Digital Forensics although labelled the same can have a different meaning to the viewer. Organisations embrace the aforementioned terms but do not have the same definition from organisation to organisation. This is one of the areas I discuss in my lectures. Oxford …

Email Triage

Mar 29, 2023 · 3 min read · Tutorial Incident Response Analysis ·

Share on:

Disclaimer: This is not aimed at delivering the level of supporting computer science knowledge and self study is a requirement to obtain profficiency. Scope The purpose of this tutorial is to demonstrate the logic flow when triaging suspicious emails. With practice the student will become familiar with the email …

Network Traffic Analysis - Web Server Compromise.

Mar 23, 2023 · 2 min read · Network Incident Response Tutorial ·

Share on:

Disclaimer: This is not aimed at delivering the level of supporting computer science knowledge and self study is a requirement to obtain profficiency. Scope This tutorial is based on a PCAP file of an alleged web server compromise and potential data loss. The file contains connections to a single webserver over a …

Forensics Aquisition, Incident Response

Mar 22, 2023 · 1 min read · Digital Forensics Incident Response ·

Share on:

Bearing in mind that in the digital investigation space a forensically acquired drive is the preferred method of evidential preservation and subsequent handling. Digital Forensics as a skill became more frequently used during incident response. It is important to remember that digital forensic acquisition was designed …