Tag: DFIR

Anti-Cast | Enterprise DFIR Investigation Scenario

Based on a compromised employee workstation scenario, we’ll discuss how to conduct an effective DFIR investigation within enterprise environments, following the incident response lifecycle. We’ll discuss triage and containment considerations, as well as elaborate on best practices for performing effective data collections and forensic analysis. To wrap up, we will discuss critical remediations and post-incident activities that should be taken into account.

Blue Team Talk: Documentation: The First Line of Defense

Documentation is arguably one of the most important first lines of defense when it comes to securing assets in any organization. Very few people enjoy writing documentation, or updating it, but it is one of the biggest skills every security team must have to be successful. Without helpful documentation, proper standardization and communication is at risk. This presentation will go through why documentation is so important and how to write good documentation.