DFIR Resources (Tools, Images, Cheat Sheets, etc) – Free & Affordable DFIR, OSINT, & Cybersecurity Training https://training.dfirdiva.com Free & Affordable DFIR, OSINT, & Cybersecurity Training Sat, 18 May 2024 05:25:30 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.4 https://training.dfirdiva.com/wp-content/uploads/2021/09/cropped-DFIRDivaLogoTwitterMultiBkg-32x32.png DFIR Resources (Tools, Images, Cheat Sheets, etc) – Free & Affordable DFIR, OSINT, & Cybersecurity Training https://training.dfirdiva.com 32 32 Advanced Linux Detection and Forensics Cheatsheet (Defensive Security) https://training.dfirdiva.com/listing/advanced-linux-detection-and-forensics-cheatsheet-defensive-security Sat, 18 May 2024 05:25:29 +0000 https://training.dfirdiva.com/?post_type=job_listing&p=2823

Name & Direct Link: Advanced Linux Detection and Forensics Cheatsheet]]>

Name & Direct Link: Advanced Linux Detection and Forensics Cheatsheet

]]> AppTotal https://training.dfirdiva.com/listing/apptotal Sat, 06 Apr 2024 03:59:12 +0000 https://training.dfirdiva.com/?post_type=job_listing&p=2681

Name & Direct Link: AppTotal Description: Analyze suspicious OAuth apps, browser extensions and SaaS add-ons to detect harmful apps, risky permissions and other security issues.]]>

Name & Direct Link: AppTotal

Description: Analyze suspicious OAuth apps, browser extensions and SaaS add-ons to detect harmful apps, risky permissions and other security issues.

]]> 4n6 App Finder (James Habben) https://training.dfirdiva.com/listing/4n6-app-finder-james-habben Wed, 11 Oct 2023 22:33:33 +0000 https://training.dfirdiva.com/?post_type=job_listing&p=2042

Name & Direct Links Web App: 4n6 App Finder GitHub: 4n6 App Finder Description: A web app to figure out what forensic tool will parse a given app’s data.]]>

Name & Direct Links

Web App: 4n6 App Finder

GitHub: 4n6 App Finder

Description: A web app to figure out what forensic tool will parse a given app’s data.

]]> DecipheringUAL – Microsoft 365 Unified Audit Log (PuravsPoint) https://training.dfirdiva.com/listing/decipheringual-microsoft-365-unified-audit-log-puravspoint Sun, 01 Oct 2023 01:06:04 +0000 https://training.dfirdiva.com/?post_type=job_listing&p=2025

Name & Direct Link: Deciphering UAL Platform: GitHub – PuravsPoint Description: This repo aims to help you decipher the UAL from a Digital Forensics & Incident Response (DFIR) perspective. The UAL is the Microsoft 365 Unified Audit Log.]]>

Name & Direct Link: Deciphering UAL

Platform: GitHub – PuravsPoint

Description: This repo aims to help you decipher the UAL from a Digital Forensics & Incident Response (DFIR) perspective. The UAL is the Microsoft 365 Unified Audit Log.

]]> Forensic Artifacts in Office 365 and Where to Find Them by Emily Parrish https://training.dfirdiva.com/listing/forensic-artifacts-in-office-365-and-where-to-find-them-by-emily-parrish Sun, 20 Nov 2022 01:56:40 +0000 https://training.dfirdiva.com/?post_type=job_listing&p=1842

Name & Direct Link: Forensic Artifacts in Office 365 and Where to Find Them Platform: Microsoft Tech Community Topics: Log Data, Azure AD Sign-Ins, Admin Activity, Office 365 Activity]]>

Name & Direct Link: Forensic Artifacts in Office 365 and Where to Find Them

Platform: Microsoft Tech Community

Topics: Log Data, Azure AD Sign-Ins, Admin Activity, Office 365 Activity

]]> Report Template for Threat Intelligence and Incident Response (Lenny Zeltser) https://training.dfirdiva.com/listing/report-template-for-threat-intelligence-and-incident-response-lenny-zeltser Wed, 14 Sep 2022 22:25:03 +0000 https://training.dfirdiva.com/?post_type=job_listing&p=1716

Name and Direct Link: Report Template for Threat Intelligence and Incident Response Platform: Lenny Zeltser’s website Includes: Adversary Actions and Tactics, Courses of Action During Incident Response, Intrusion Campaign Analysis, Intrusion Kill Chain Framework, Courses of Action Matrix, Diamond Model]]>

Name and Direct Link: Report Template for Threat Intelligence and Incident Response

Platform: Lenny Zeltser’s website

Includes: Adversary Actions and Tactics, Courses of Action During Incident Response, Intrusion Campaign Analysis, Intrusion Kill Chain Framework, Courses of Action Matrix, Diamond Model

]]> Awesome Event IDs (stuhli) https://training.dfirdiva.com/listing/awesome-event-ids-stuhli Sun, 11 Sep 2022 01:54:19 +0000 https://training.dfirdiva.com/?post_type=job_listing&p=1705

Name & Direct Link: Awesome Event IDs Platform: GitHub (stuhli) Topics: Event ID Databases, Documentation, Configuration and Monitoring Suggestions, and Analysis]]>

Name & Direct Link: Awesome Event IDs

Platform: GitHub (stuhli)

Topics: Event ID Databases, Documentation, Configuration and Monitoring Suggestions, and Analysis

]]> Filesec.io – Latest File Extensions Being Used by Attackers https://training.dfirdiva.com/listing/filesec-io-latest-file-extensions-being-used-by-attackers Tue, 02 Nov 2021 03:26:22 +0000 https://training.dfirdiva.com/?post_type=job_listing&p=1329

Name & Direct Link: Filesec.io About: The latest file extensions being used by attackers]]>

Name & Direct Link: Filesec.io

About: The latest file extensions being used by attackers

]]> MalAPI.io – Maps Windows APIs to Common Malware Techniques https://training.dfirdiva.com/listing/malapi-io-maps-windows-apis-to-common-malware-techniques Tue, 02 Nov 2021 03:21:36 +0000 https://training.dfirdiva.com/?post_type=job_listing&p=1327

Name & Direct Link: MalAPI.io About: Maps Windows APIs to common techniques used by malware.]]>

Name & Direct Link: MalAPI.io

About: Maps Windows APIs to common techniques used by malware.

]]> CyberChef Recipes (mattnotmax) https://training.dfirdiva.com/listing/cyberchef-recipes-mattnotmax Fri, 08 Oct 2021 01:53:34 +0000 https://training.dfirdiva.com/?post_type=job_listing&p=1135

Name & Direct Link: CyberChef Recipes Platform: GitHub – mattnotmax This is a list of CyberChef recipes]]>

Name & Direct Link: CyberChef Recipes

Platform: GitHub – mattnotmax

This is a list of CyberChef recipes

]]>