The Incident Response Podcast

We discuss fileless malware and what you can do to detect and hunt for it

Discuss why Windows audit logging is an essential and FREE IR 101 that everyone should take on.

Discussion of what LOLBin and LOLBas are

A new open sopurce tool ARTHIR, what it is and what you can do with it.

We discuss how a tweet discussion turned into a discussion of too many agents on a system can be hard to manage

Newsworthy Items: Over 1 BILLION Pwned Dell Breach Marriott/Starwood Breach Malware of the month - LOKIBot Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share

We discuss a breach and the blame game that ensued.

A discussion with Katie Nickels, formerly of MITRE, now Red Canary about MITRE ATT&CK

Discussion wiht jim Schware

A discussion on WMI tools and detections