Travis May

Looking for a cost-effective guide to building a digital forensics lab? In this article for Police Chief Magazine, Trey Amick walks through how you can get started, including considerations for training, requirements, and opportunities for funding: https://ow.ly/GSg250SeFCE #DFIR

37

Unlock the key to managing uncertainty. Explore risk analysis with a focus on national security. Register today for the MORS Certificate in U.S. National Security Risk Analysis. https://loom.ly/krF8WBk #NationalSecurity #RiskManagement #DataAnalysis

7

Drawing upon a comprehensive survey of almost 400 corporate DFIR professionals, the fourth annual State of Enterprise #DFIR report examines the evolving contributions and experiences of DFIR professionals within corporate environments. Get it today: https://ow.ly/ENaK50RkeWH

16

Just complete a DFIR investigation engagement. Instead of repeatedly sharing the ransomware actors’ TTP, I want to point out quite some first responders on how they handle the artifact collection may jeopardize the whole investigation. #BattlefieldDFIR #ShutdowntheEdgeDevice #MissingLog #CherryPickRootCause #NoSiteVisitbutRemote #SeeingPretendNotSeeing #BlametheMalware #BlameNoMFA #BlameNoPatch #BlameNoPentesting #BlameOutdatedProduct …

19

New study suggests that 7 in 10 organizations will spend more on security systems in 2025: https://ow.ly/xAfB50Sivob . . #physicalsecurity #security #securitysystems

2

New Synectics eBook for public space surveillance teams: https://loom.ly/qjPiXKE #security #securityindustry #globalsecurity #surveillance #publicspaces #Synectics

11

In this article for the IACP's Police Chief Magazine, PenLink's Johnmichael O'Hare and our own Trey Amick talk about how digital forensics and open-source intelligence (#OSINT) are playing crucial roles in modernizing police investigations: https://ow.ly/UH9O50SUg9q #DFIR

29

Regulations, Frameworks, Best Practices, so it goes on. We've seen Emergency Directives, Executive Orders and still, by far the weakest link is a fundamental lacking of basic security discipline,managment, and seemingly knowledge. AI WILL NOT SOLVE THIS PROBLEM, IT WILL SIMPLY COMPOUND AND EXACERBATE THE EXPOSED AND INSECURE DIGITAL WORLD. Whilst we see a global spend of around $300 billion annually on cyber security, we witness that in costs and losses to cybercrime weekly. Think about that for a moment then read 'Best Practice.' One day soon we will look back and say, Do you remember when cyber crime was only a $trillion a month? Now look at the situation...That day is not too far away and the $300 billion spend currently is largely wasted. Sure the Agencies want you to be informed, made aware, even warned, but only just enough so. It provides a level of Plausible Deniability. How good is a Doctor who incorrectly prescribes a medicine to a condition caused by the medicine their patient ingests... The Agencies and Governments DO NOT WANT the world to know that the Digital Advantages they saught and continually seek, due to their own security failings, have become the Blueprint for Cybercrime. That would place a whole load of liabilities on their doorstep. So the choreographed dance continues along with Digital Whack-a-Mole and Insecurity Entrapment. Be warned, the Music is slowing down and in true Titanic fashion, there is a distinct shortage of seats... AI like most technology is being better utilized and deployed by criminals to disrupt, cause chaos, and for crime. Jen Easterly, Chris Wray, Paul Nakasone and many others keep warning us of the China crisis and Russian cyberwars, but do little to truly arm and protect by a lack of openess and honesty. That's spying for you I guess... The mindest remains Data Capture and Data Control. Security is barely on the agenda. Ask CISA how their Emergency Directive M-19-01 on DNS Tampering and Abuse is going 5 years on. Or I can simply tell you, not one Federal Agency has secure DNS records and servers. Facts can be stubborn things. Best Practice, Frameworks, and impotent Regulations DO NOT get the job done. Time is running out for us to have anything left that is not controlled, or owned by adversaries including Critical Infrastructure, Hospitals, Universities, Law Enforcement, and Governments. Immaterial of any religion you may or may not have, a greater power looking down would mark the last several decades and overall security capability with a rather large red capital F... #WhitethornShield Federal Bureau of Investigation (FBI) FBI Cyber Division The White House White House Presidential Innovation Fellows United States Air Force National Security Agency United States Attorneys'​ Offices U.S. Department of Justice #InternetSecurity #DNS #PKI CISA Alumni Group

29

14 Comments

The Security Institute has released the details for its 2024 Annual Conference: The Changing Face of Security. Find out more: https://loom.ly/eWWrHOw #security #securitynews #securityindustry

2

Join Patriot's Doug Baker for a Masterclass on Entra Conditional Access When: August 20th, 10am PST/1pm EST Register here: https://lnkd.in/exfq4Nbw This webinar is designed for administrators, security teams, and auditors who want to learn more about CA and how to use it effectively in their organization. Whether you are new to CA or have some experience with it, this webinar will help you gain a deeper understanding of the concepts, features, and benefits of CA, as well as the common challenges and pitfalls to avoid. 

13

1 Comment

Special Promotion: Save $2,000 on the Certified Artificial Intelligence & Investigations Expert (CAIIE) Program! As artificial intelligence reshapes industries, the realm of investigations and intelligence is experiencing transformative changes. The McAfee Institute's Certified Artificial Intelligence & Investigations Expert (CAIIE) program is at the forefront of integrating AI into the investigative processes. This certification equips professionals with the knowledge and skills to leverage AI effectively, enhancing both their capabilities and career prospects. Why Enroll in the CAIIE Program? - Industry-Leading Curriculum: Tailored by experts in AI and investigations, our curriculum bridges the gap between theoretical knowledge and practical application. - Advanced Skills: Master AI tools that revolutionize data analysis, pattern recognition, and decision-making processes in investigations. - Career Advancement: Position yourself as a pioneer in the integration of AI in law enforcement, cybersecurity, and corporate security roles. This exclusive offer is available for a limited time. Enhance your professional toolkit with advanced AI skills and save $2,000 when you enroll now. Take the next step in your career with CAIIE. Secure your spot today! https://bit.ly/3U5yuSC #ArtificialIntelligence #Investigations #McAfeeInstitute #CAIIE #CareerAdvancement #ProfessionalDevelopment

3

As the FFIEC Cybersecurity Assessment Tool (CAT) approaches its sunset, financial institutions must navigate the transition to alternative cybersecurity frameworks. This webinar will provide you with updates and guidance needed to ensure a smooth transition and maintain robust cybersecurity practices. Register ➡️ https://loom.ly/AR9KVOk

6

I am continuing with Part 3 on how to structure the mind map in OSINT investigation in Mastering OSINT with Mind Mapping series. #osint #syberseeker https://lnkd.in/gVAQJRAP

11

💭 #DFIR Thoughts It is a generalized misunderstanding that the column names and descriptions of a report generated by a digital forensics tool are the last word on what an artifact is or what it means. This erroneous assumption is so pervasive that it can be seen even within our organizations and labs. Using a tool that has been blessed as tested and verified does no mean that proper interpretation of the data and/or report is not needed anymore. It also does not absolve the expert from doing their own testing when an artifact is of key importance to a case. It definitely requires that managers stop outsourcing their responsibility to the validation team and really take into account the expertise of the examiners under their care. Even more importantly it should underscore how the best report is not the one that is more favorable to the theory of the case but the one that reflects the data accurately. Tool reports are not the data. The data is the data. Validate everything that matters. Tools can: 🔵 Parse data incompletely. 🔵 Parse data completely but present in a way that could be misinterpreted (which is what happens when new data has to fit in a predefined tool schema that does not provide for a way to indicate possible nuance.) 🔵 Wholly miss relevant data. 🔵 Present the data correctly in a way that is easy to understand even to non-experts. 🔵 Be erroneous. The tool has been wrong in the past and it will be again in the future. Does that mean tools are invalidated or useless? By all means, NO! Tool output is not the end of an examination but the start. Tool makers (I am one BTW) strive to make true sense of the data but at the end of the day "it is not the tool that does the exam but the examiner", the person behind the keyboard (thanks to DFIR Training (Brett Shavers) for the quote.) If you want to delve more into the topic check out SANS Digital Forensics and Incident Response paper titled Six Steps to Mobile Validation here: https://lnkd.in/ehQTkDs9 #DigitalForensics #MobileForensics #DataValidation #YouAreTheTool

91

5 Comments

The posters may change over time, but the fundamentals of OPSEC do not: 1) Identify your critical information 2) Evaluate threats 3) Analyze vulnerabilities 4) Assess risks 5) Apply countermeasures 6) Periodically reassess. https://lnkd.in/eQ6qKxs4

135

10 Comments