Forensics & Incident Response

Best Incident Response Tools for Security Teams

Choose incident response tools by NIST SP 800-61 phase — why teams over-buy detection and under-resource preparation and post-incident work, with a buying order.

October 8, 20265 min read

Malware Analysis in Isolated Environments: An Introduction

Malware analysis in an isolated environment is a containment problem first — the isolation layers and their limits, static versus dynamic, and when to hand off.

October 7, 20265 min read

Forensics & Incident Response

A Beginner Guide to Digital Forensics Methodologies

Digital forensics methodologies per NIST SP 800-86 — the four phases quoted, order of volatility, hashing for integrity, chain of custody and beginner mistakes.

October 5, 20265 min read