I'm giving a keynote in person CactusCon this Friday!!! My first in person conference in two years! Its free - in person or remote. cactuscon.com/cc10

In my spare time, I help organize #VR #eSports to help promote diversity and inclusion of women. If you play POPULATION: ONE - consider grabbing a partner and joining our free tournament on Feb. 13! All skill levels are welcome :)

Tomorrow is my keynote! What does the Bend and Snap have to do with Forensics? Its not too late to register, watch and find out (its free)! Join me at 1PM MT! eventbrite.com/e/cactuscon-10…

Looking forward to attending the SANS DFIR #DFIR Summit tomorrow! Lots of great talks lined up.

Join me and Ryan "Chaps" Chapman on the SANS Institute Wait an Infosec show now: linkedin.com/events/inhotpu…

Dear DFIR colleagues, Always be wary of 404 error codes in web server log files. Some webshells intentionally send this error code to deceive you into thinking the request failed. shadowserver.org/news/technical…

Women make up only a fraction of the cybersecurity workforce. We're here to change that! Join a community that supports women's cybersecurity empowerment through partnerships, skill-building opportunities, and more. wicys.org/benefits/?utm_… #WomenInCybersecurity #WiCyS

Why is Linux safer than other OS? 😂

Looking forward to this tomorrow morning!

All the talks from the SANS DFIR DFIRSummit 2023 in Austin are now available on YouTube #DFIR youtube.com/watch?v=FJ5zlX…

Scholarships for the #WiCyS2024 technical conference are now open! Apply for reduced conference rate registration and two nights of complimentary shared lodging on April 11 and 12. Submission deadline: November 6, 2023. membercommunity.wicys.org/page/WiCyS2024… #WiCyS #CybersecurityConference

Grab a coffee and join us ZeroFox as we discuss the latest trends on current and emerging phishing tactics at 11 AM ET: get.zerofox.com/zerofox-approa…

I have a new blog post up detailing per app registry hives for analysis in #DFIR investigations related to MSIX Registry Redirection. These hives can contain additional information that may not be found in other locations. ZeroFox SANS DFIR zerofox.com/blog/the-regis…

#Kape targets created for the collection of per-app registry hives!

Join me tomorrow at 1PM ET as I discuss additional registry hives you can leverage in you investigations that may contain data not available elsewhere. #DFIR SANS DFIR sans.org/webcasts/regis…

Join me in about an hour to talk about additional registry hives for analysis!!! Who doesn't love registry hives?? SANS DFIR #DFIR ZeroFox

It's hard to believe, but we're coming up on our THIRD annual SANS Institute Ransomware Summit! Make sure to register early and get your calendars situated :). Come learn all you can to help protect your organization against #ransomware.

What artifacts might you be overlooking if a threat actor utilizes the Microsoft RDP app instead MSTSC? How about thumbnails and Jump Lists created in the %localappdata% folder? I have a new blog post up: zerofox.com/blog/remote-de… #DFIR SANS DFIR ZeroFox

Don't forget to submit to the Ransomware summit! 1 week left - Cant wait to read your CFP!

Finally headed home from Amsterdam to CactusCon and looking forward to giving my talk Saturday about Registry Redirection with MSIX!