SANS Digital Forensics and Incident Response

SANS Digital Forensics and Incident Response

Latest Videos

Panel Going Dark DOS’ing Yourself for the Better
Panel Going Dark DOS’ing Yourself for the Better
Atomic Ransomware Emulation
Atomic Ransomware Emulation
Keynote Behind the Screens Decrypting the Ransomware Diaries
Keynote Behind the Screens Decrypting the Ransomware Diaries
Strategies for Active Defense against Pre-Ransomware and Ransomware Attacks
Strategies for Active Defense against Pre-Ransomware and Ransomware Attacks
Ransomware Data Leak Sites The Uncomfortable Truths
Ransomware Data Leak Sites The Uncomfortable Truths
Evolution of Ransomware Tactics in 2023 Insights from The DFIR Report
Evolution of Ransomware Tactics in 2023 Insights from The DFIR Report
Ransomware Running Wild in the Cloud
Ransomware Running Wild in the Cloud
Unmasking Cyber Shadows A Tactical Approach to Hunting Ransomware TTPs
Unmasking Cyber Shadows A Tactical Approach to Hunting Ransomware TTPs
Ransomware Kingpins LockBit Disrupted
Ransomware Kingpins LockBit Disrupted
How an Info Sharing Analysis Center Works w its Members to Improve Cyber Defenses for Their Sector
How an Info Sharing Analysis Center Works w its Members to Improve Cyber Defenses for Their Sector
JP 悪性MSIXファイルの台頭
JP 悪性MSIXファイルの台頭
SANS Threat Analysis Rundown Katie Nickels
SANS Threat Analysis Rundown Katie Nickels
Protecting the Cloud from Ransomware Host Ryan Chapman June 20 2023
Protecting the Cloud from Ransomware Host Ryan Chapman June 20 2023
Handling Ransomware Incidents What YOU Need to Know
Handling Ransomware Incidents What YOU Need to Know
What is the FOR528 Ransomware for Incident Responders course all about?
What is the FOR528 Ransomware for Incident Responders course all about?
SANS Threat Analysis Rundown Katie Nickels
SANS Threat Analysis Rundown Katie Nickels
Stay Ahead of Ransomware Livestream Series - Episode 2
Stay Ahead of Ransomware Livestream Series - Episode 2
Memory Forensics Acquisition Cloud
Memory Forensics Acquisition Cloud
FOR498 - New Course Name New Content & A Whole Lot of Actionable Intelligence in 90 min or less
FOR498 - New Course Name New Content & A Whole Lot of Actionable Intelligence in 90 min or less
Cloud-Powered DFIR Harnessing the cloud to improve investigator efficiency
Cloud-Powered DFIR Harnessing the cloud to improve investigator efficiency
Breaking the Ransomware Tool Set When a Threat Actor Opsec
Breaking the Ransomware Tool Set When a Threat Actor Opsec
The Way to a Stakeholder’s Heart is by Providing Value Measuring Success of Your CTI Program
The Way to a Stakeholder’s Heart is by Providing Value Measuring Success of Your CTI Program
The Report Writer’s Grimoire
The Report Writer’s Grimoire
Lessons Learned From Over a Decade in OSINT
Lessons Learned From Over a Decade in OSINT
Unmasking the Iranian APT COBALT MIRAGE
Unmasking the Iranian APT COBALT MIRAGE
DocIntel A Context-Centric Cyber Threat Intelligence Platform
DocIntel A Context-Centric Cyber Threat Intelligence Platform
How to Use CTI No Matter the Size of Your Organization
How to Use CTI No Matter the Size of Your Organization
Operationalizing Intelligence SOPs withThink Steps
Operationalizing Intelligence SOPs withThink Steps
Brighten Up the Ideal Sky An Inside View of Charming Kitten’s Operations and Support to the IRGC
Brighten Up the Ideal Sky An Inside View of Charming Kitten’s Operations and Support to the IRGC
A Practical Case of Threat Intelligence – From IoC to Unraveling an Attacker Infrastructure
A Practical Case of Threat Intelligence – From IoC to Unraveling an Attacker Infrastructure
The Cyber Vory The Evolution of the Russian Organized Crime Threat Actors
The Cyber Vory The Evolution of the Russian Organized Crime Threat Actors
Memory Forensics How we used to do it & how we use it to respond to large-scale breaches today
Memory Forensics How we used to do it & how we use it to respond to large-scale breaches today
意外と簡単なランサムウェア運用ツールの検出と駆逐
意外と簡単なランサムウェア運用ツールの検出と駆逐
Detecting & Hunting Ransomware Operator Tools It Is Easier Than You Think
Detecting & Hunting Ransomware Operator Tools It Is Easier Than You Think
Why should you take the FOR308 Digital Forensics Essentials?
Why should you take the FOR308 Digital Forensics Essentials?
SANS Threat Analysis Rundown STAR
SANS Threat Analysis Rundown STAR
The Top 5 Misconceptions About Ransomware
The Top 5 Misconceptions About Ransomware
Reimagining Intelligence Deliverables Using Structured Threat Content
Reimagining Intelligence Deliverables Using Structured Threat Content
Ransomware Rebranding So Hot Right Now
Ransomware Rebranding So Hot Right Now
Malware Analysis What’s the Point?
Malware Analysis What’s the Point?
Implementing Intelligence Formulating Detections
Implementing Intelligence Formulating Detections
Lessons from Bletchley Park for Building a Collaborative and Innovative Intelligence Program
Lessons from Bletchley Park for Building a Collaborative and Innovative Intelligence Program
Developing The Analyst Creating Career Roadmaps for Intelligently Progressing in CTI
Developing The Analyst Creating Career Roadmaps for Intelligently Progressing in CTI
Consume and Produce The Economics ofCyber Threat Intelligence Operations
Consume and Produce The Economics ofCyber Threat Intelligence Operations
Deconstructing the Analyst Mindset
Deconstructing the Analyst Mindset
SANS Threat Analysis Rundown STAR Live Stream
SANS Threat Analysis Rundown STAR Live Stream
SANS Threat Analysis Rundown
SANS Threat Analysis Rundown
The Truth about Ransomware Its not Complicated
The Truth about Ransomware Its not Complicated
What makes a solid DFIR professional – How to keep growing in the field and not lose your luster
What makes a solid DFIR professional – How to keep growing in the field and not lose your luster
Memory Forensics At A Scale
Memory Forensics At A Scale