))
Get involved in the exciting world of Digital Forensics and Incident Response with: Traffic Light Protocol. The Digital Forensics Podcast. In each episode, we sit down with seasoned DFIR professionals, the blueteamers who work around the clock to investigate cyber intrusions. From data breaches to cyberattacks, they share firsthand accounts of some of the most intense investigations they've ever tackled, how they deal with burnout and the added pressure of cat and mouse while they learn abou ...
…
continue reading
1
Episode 7 - Defending Against Scattered Spider: Understanding Their Tactics, Techniques, and Procedures
15:46
15:46
Play later
Play later
Lists
Like
Liked
15:46
Send us a Text Message. In todays episode of TLP - Traffic Light Protocol, Clint Marsden talks about Defending Against Scattered Spider: Understanding Their Tactics, Techniques, and Procedures. Key Takeaways Understanding Scattered Spider: Scattered Spider, also known as Roasted Octopus or Octo Tempest, utilizes various legitimate tools for malicio…
…
continue reading
1
Episode 6 - Responding to ransomware - is your VPN a target? Plus ransomware risk mitigation with Phil Ngo
24:50
24:50
Play later
Play later
Lists
Like
Liked
24:50
Send us a Text Message. In this episode, we speak with Phil Ngo, a Primary Investigator in Accenture's global cyber response team. As a primary investigator, he is responsible for helping clients recover from major incidents as well as delivering proactive cyber services, such as threat hunting and tabletop exercises. Philip started his career as a…
…
continue reading
1
Episode 5 - NIST SP 800-61 Computer Security Incident Handling Guide (Post-Incident Activity)
31:45
31:45
Play later
Play later
Lists
Like
Liked
31:45
Send us a Text Message. This is the biggest episode from a content perspective so far. I'm excited to share it with you. Episode Highlights: How to run post-incident debriefs and post-mortems. Involving external teams Using lessons learned to form actionable insights. Key questions to address in incident analysis. Effective report writing strategie…
…
continue reading
1
Episode 4 - NIST SP 800-61 Computer Security Incident Handling Guide (Containment,Eradication and Recovery)
20:48
20:48
Play later
Play later
Lists
Like
Liked
20:48
Send us a Text Message. Show Notes: Episode on Containment, Eradication, and Recovery In this episode of Traffic Light Protocol, Clint Marsden explores the containment, eradication, and recovery phases of the NIST SP 800-61 framework for computer security incident handling. Key Topics Covered: Containment Strategies: Choosing appropriate containmen…
…
continue reading
1
Episode 3 - (Part 2) NIST SP 800-61 Computer Security Incident Handling Guide (Detection)
10:19
10:19
Play later
Play later
Lists
Like
Liked
10:19
Send us a Text Message. In this conclusion of the Detection phase, Clint wraps up Incident Prioritisation. This includes Functional impacts of the incident, information impact of the incident and the recoverability of the incident. Not all of these are needed, or relevant when tracking your incident and Clint explains when to categorise incidents u…
…
continue reading
1
Episode 3 - NIST SP 800-61 Computer Security Incident Handling Guide (Detection)
45:30
45:30
Play later
Play later
Lists
Like
Liked
45:30
Send us a Text Message. In this 45 minute episode Clint covers a lot of ground based on the Detection phase of NIST 800-61. Attack vectors for digital security incidents, including insider threats and weaponized USBs. Cybersecurity incident response and detection, including NIST guidelines and Sysmon logging augmentation The importance of following…
…
continue reading
1
Episode 2 - NIST SP 800-61 Computer Security Incident Handling Guide (Preparation)
25:56
25:56
Play later
Play later
Lists
Like
Liked
25:56
Send us a Text Message. In this Episode Clint Marsden talks about the first phase of Computer Security Incident Handling according to NIST. Listen to real world examples of how to get prepared before a Cyber Security Incident arrives. Show notes: Link to NIST SP 800-61 PDF https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf B…
…
continue reading
1
Episode 1 - Digital forensics trends and preparations, learning from real life case studies & DFIR training for getting started
22:05
22:05
Play later
Play later
Lists
Like
Liked
22:05
Send us a Text Message. In this first episode we kick off with Clint Marsden, the host of Traffic Light Protocol (TLP) where he talks about what its like to work in DFIR, how to get started with Cyber training, what to expect in future episodes, and of course a light touch on AI Forensics! Join us for the first episode. The next episodes coming up …
…
continue reading
