Tag: Incident Response

July 24, 2022 LetsDefend’s DFIR Challenge: REvil Ransomware Walk-Through

LetsDefend’s DFIR challenge walk-through of the REvil ransomware challenge! Everything you need to know to complete the DFIR challenge.

July 11, 2022 Automated Sysmon Deployment

Learn how to automate the deployment and configurations of Sysmon in your environment.

June 2, 2022 What You Need to Know to Defend Against CVE-2022-30190!

Office documents exploiting CVE-2022-30190 are coming to an inbox near you! Find out how you can prepare and mitigate this threat!

May 23, 2022 How to Investigate Malicious DNS Requests

How to track down malicious DNS requests in Windows systems. Incident response techniques for DNS security products like Cisco Umbrella, or DNSFilter.