https://www.linkedin.com/posts/cyber-triage-dfir-training-the-ultimate… — Cyber Security Sharks 2 — TG.ME

https://www.linkedin.com/posts/cyber-triage-dfir-training-the-ultimate-share-7469892923061596160-J681/?utm_source=share&utm_medium=member_android&rcm=ACoAAD7or8YBQbfir-57HBad2SBsnJZoXQqZwmc Cyber Triage DFIR Training: The Ultimate Collection ⤵ Intro to DFIR IR Tool Buyer's Guide: https://lnkd.in/gPrMVsv6 The Investigation Philosophy: https://lnkd.in/gPeAjhpR How to Identify Users: https://lnkd.in/g8vZpZkR How to Investigate User Logins: https://lnkd.in/gJGJvCQk How to Investigate User Activity: https://lnkd.in/gB6uCfwH How to Detect Malware Persistence: https://lnkd.in/gMT8_UT2 How to Detect Running Malware: https://lnkd.in/gahEusw3 How to Detect Malware Remnants: https://lnkd.in/gMPZTuYm How to Detect System Config Changes: https://lnkd.in/gZJbv_hm DFIR Next Steps Suspicious Network Logons: https://lnkd.in/gnKzmEDz Suspicious Certutil.exe: https://lnkd.in/gFkAtK4a Suspicious Curl.exe: https://lnkd.in/gCW2x4q8 Suspicious RMMs: https://lnkd.in/g9Nw-DE4 Mimikatz: https://lnkd.in/gXAKq-Er DFIR Breakdown Atexec: https://lnkd.in/eW24N8s6 ImpHash: https://lnkd.in/eMB-h-k3 Smbexec: https://lnkd.in/dJjCC9Wn Kerberoasting: https://lnkd.in/dwMzxBDY Windows Scheduled Tasks: https://lnkd.in/gC5ryZ_G Downloading Attack Tools with Certutil: https://lnkd.in/e_VETcbA Windows Registry Forensics Cheatsheet: https://lnkd.in/gjvT2Km3 Scheduled Tasks: https://lnkd.in/gC5ryZ_G NTUSER.DAT: https://lnkd.in/gKRsD-Df Network Data: https://lnkd.in/gkM77yvt MUICache: https://lnkd.in/gj8x-A4U UserAssist: https://lnkd.in/g-5j8Wvf AmCache: https://lnkd.in/ga8asbQH Shellbags: https://lnkd.in/gtMKD3nG RunMRU: https://lnkd.in/g_STB_gk Jump List Forensics What Is a Jump List: https://lnkd.in/gaU2H57q Jump List Forensics: https://lnkd.in/gY8aQ3Kj Jump Lists Cache: https://lnkd.in/gnVnR5eH RMM Investigations Overview: https://lnkd.in/eaAdT9r2 LogMeIn: https://lnkd.in/g5cNeiXv AnyDesk: https://lnkd.in/gXFfP6i4 Pulseway: https://lnkd.in/eqTMiuXE TeamViewer: https://lnkd.in/ez-RjSGg AI for DFIR DFIR Data and AI: https://lnkd.in/ggcRygmy When not to use AI: https://lnkd.in/gfpNr7iy MCP for DFIR: https://lnkd.in/gJrzFyq7 Local LLMs for DFIR: https://lnkd.in/gtSph2y3 AI SKILLS and DFIR: https://lnkd.in/gQdkjns8 What are DFIR Agents: https://lnkd.in/gzpzea5p Cloud LLMs and Privacy: https://lnkd.in/gtHY_xug Cyber Triage and Your AI: https://lnkd.in/gcfWb8da Combating Hallucinations: https://lnkd.in/gm6NE_Rh OODA for Investigations OODA Loop for DFIR Overview: https://lnkd.in/gRTMmMiU How to Observe in Investigations: https://lnkd.in/guQXPMfr How to Orient in Investigations: https://lnkd.in/gJNSPqHN How to Decide in Investigations: https://lnkd.in/grE8ApVX How to Act in Investigations: https://lnkd.in/gUQ5AuCE DFIR Tool Guides SOC Software Guide: https://lnkd.in/g9N9YyMg Registry Forensics Tools: https://lnkd.in/gNfSWeFW Remote Forensic Collection: https://lnkd.in/ecCyCV8B Computer Forensics (Tools Scored): https://lnkd.in/g_Scdz32 Computer Forensics (Comparison Chart): https://lnkd.in/g6URv4r2 P.S. Share this post to help other DFIR pros!

6