Track 3·29 min
Kyle Nordby
Shows how remote management tools leave forensic traces and which artifacts help investigators confirm their use.
incident-responsehuntingtool+2
Kyle Nordby
2 talks in the archive.
Filters+
1–2 of 2 talks
Track 1 Saturday·45 min
Kyle Nordby
Examines which forensic artifacts cloud free tiers leave behind after simulated compromises of Azure, GCP and AWS instances.
cloudincident-responsemonitoring+1