Incident Report, Incident Identification and Categorisation Purpose of an Incident Report The Bridge: Connects the initial threat identification to the final remediation steps. The Archive: ...

Windows Forensics Overview NTFS A default Windows file system replacing FAT for better reliability and security File Metadata stores creation modification and access timestamps ...

Obfuscation Code Obfuscation Obfuscation is a technique to re-write the code in a way that make a script more difficult to read by humans but allows it to function the same from a technical po...

Category: Endpoint Forensics Checkout the lab here: https://cyberdefenders.org/blueteam-ctf-challenges/akira-storm-1567/ Description As a member of the DFIR team, you’re tasked with inves...

Category: Endpoint Forensics Checkout the lab here: https://cyberdefenders.org/blueteam-ctf-challenges/insider/ Description After Karen started working for ‘TAAUSAI,’ she began doing ille...