Filip Fog retweeted
Reminder that creating a memory dump of Outlook.exe not only produces access tokens but also potentially sensitive email content.
Filip Fog retweeted
Malicious Code Passed to PowerShell via the Clipboard i5c.us/d28784
Filip Fog retweeted
Let us help you create a flight plan that suits you - where you are now and where you want to go in the future.
Review the #SANSCloudAce flight plan here: sans.org/u/185f
Filip Fog retweeted
It’s competition time! Here is your chance to win a free SANS Flexi-Pass worth $7,519 USD!
To enter, simply follow @sansemea, retweet this post and tag three friends in the comments. The winners will be announced on 30 July.
What is a SANS Flexi-Pass? sans.org/u/133y
Filip Fog retweeted
Congrats to our winning #DFIR team F.A.S.T. @mjciantar @fogfilip @Stormbringer_L & alan saied! Incredible #Day6 analysis & investigative reporting #FOR508 #SANSCybercast (CET) Lethal forensicator coins are heading your way ASAP!
Would like to thank @sibertor for a great week instructing #FOR508 @ #SANSOslo2020
Filled my head with both (EventLog, Memory, Timeline & NTFS) Analysis. Fun & intense moments with advanced real-world scenarios. @sansforensics has delivered what I need to stay up to date. 🦅












