Seth Enoka – DFIR

Cybersecurity and Technology

Tag: incident response

incident response

A Roadmap to Earning Your First (or Next) SANS Certification

Forensics, How-To, Incident Response |

I’m in no way saying that certs or degrees are the only path to success. There are definitely individuals in the field who’ve never taken a cert or completed a degree and are super successful. However, I think those individuals are rare, they’re the exception (i.e. exceptional). In my experience (and it’s only my experience I can speak from), certs are the fastest way to get skilled up in an area where you have knowledge gaps. With that said, let’s get started.

Read More

Unlocking the DFIR Job Market: Strategies for Landing Your Dream Role

Forensics, Incident Response, Uncategorized |

It can be difficult when there are so many different roles and job titles and little standardisation. The requirements for a role can differ vastly depending on the hiring manager and the HR team (not to call anyone out, it’s a fast moving field and it’s hard to keep up). There’s no shortage of advice like this; I realise of course that a quick Google search brings up a multitude of similar blogs, but if people are still asking ‘where do I start,’ at least having written this I have somewhere to point them for a quick rundown of my thoughts.

Read More

Alternate Data Streams

Forensics, How-To, Incident Response |

Quick writeup on Alternate Data Streams (ADS). ADS is a file attribute used in NTFS that ultimately provides an opportunity for investigators to extract valuable evidence that might otherwise be overlooked. ADS is an additional stream of data that can be attached to a file on Windows systems. It’s a hidden file attached to a […]

Read More

Build Your Own Forensics Go-Bag

Forensics, Incident Response |

Everyone has their own take on the components which make up a basic DFIR go-bag for when that inevitable call from a client comes. I always have with me a small collection of devices and boot USBs which I think are useful in most cases, mostly because I’ve found myself in situations where any of […]

Read More