Invidious
SANS Digital Forensics and Incident Response
Subscribe | 78K
 RSS

Over 80% of all breach victims learn of a compromise from third-party notifications, not from internal security teams. In most cases, adversaries have been rummaging through your network undetected for months or even years.

Incident response tactics and procedures have evolved rapidly over the past several years. Data breaches and intrusions are growing more complex. Adversaries are no longer compromising one or two systems in your enterprise; they are compromising hundreds. Your team can no longer afford antiquated incident response techniques that fail to properly identify compromised systems, provide ineffective containment of the breach, and ultimately fail to rapidly remediate the incident.

A thorough understanding of many detailed areas is required for success, including a mastery of the following fundamental skills covered by the SANS Digital Forensics and Incident Response (DFIR) YouTube Channel.

View channel on YouTube
Switch Invidious Instance
Videos
Shorts
Livestreams
Playlists
newest
oldest
popular
Next page  

28:46

From Gut to Gold Standard: The Admiralty System in CTI

SANS Digital Forensics and Incident Response

Shared 1 month ago

489 views

35:16

Hunting North Korea’s Contagious Interview Operation

SANS Digital Forensics and Incident Response

Shared 1 month ago

420 views

31:23

Can We Forecast CTI’s Future? Mapping with SATs

SANS Digital Forensics and Incident Response

Shared 1 month ago

209 views

29:29

Poison in the Digital Well: Supply Chain Defense

SANS Digital Forensics and Incident Response

Shared 1 month ago

161 views

33:47

Can’t Stop, Won’t Stop: TA584 Innovates Initial Access

SANS Digital Forensics and Incident Response

Shared 1 month ago

278 views

35:08

Beyond Bullet Points: Visual Intelligence in the Age of AI

SANS Digital Forensics and Incident Response

Shared 1 month ago

177 views

37:33

NEW2CTI | Beyond the Feed: CTI That Matters to Business

SANS Digital Forensics and Incident Response

Shared 1 month ago

177 views

32:03

NEW2CTI | Connecting the Dots: Incident to Campaign Intel

SANS Digital Forensics and Incident Response

Shared 1 month ago

119 views

22:00

Rhadamanthys and the Limits of Private Sector Ops

SANS Digital Forensics and Incident Response

Shared 1 month ago

86 views

27:15

NEW2CTI | Bling-Up CTI Requirements with Diamond Model

SANS Digital Forensics and Incident Response

Shared 1 month ago

80 views

28:47

NEW2CTI | Operationalizing CTI: From PIRs to Priority TTPs

SANS Digital Forensics and Incident Response

Shared 1 month ago

110 views

29:34

Managing the Deprecation of Threat Actor Aliases

SANS Digital Forensics and Incident Response

Shared 1 month ago

68 views

26:20

NEW2CTI | Red Teams with Receipts

SANS Digital Forensics and Incident Response

Shared 1 month ago

63 views

36:08

Operation Trashpanda: Disrupting RaccoonO365

SANS Digital Forensics and Incident Response

Shared 1 month ago

156 views

27:51

The C2 You Didn’t See Coming: Redefining Stealth

SANS Digital Forensics and Incident Response

Shared 1 month ago

130 views

39:23

Keynote | From Theory to Tradecraft: Tracking AI Adversaries

SANS Digital Forensics and Incident Response

Shared 1 month ago

175 views

31:24

Principle of Least AI: Blueprint for GenAI in CTI

SANS Digital Forensics and Incident Response

Shared 1 month ago

47 views

34:36

Applied Forecasting: Part Deux

SANS Digital Forensics and Incident Response

Shared 1 month ago

50 views

45:44

Keynote | If Only We Had the Data: Mismatched Expectations

SANS Digital Forensics and Incident Response

Shared 1 month ago

44 views

30:48

NEW2CTI | Attribution: Outcomes Over Names

SANS Digital Forensics and Incident Response

Shared 1 month ago

73 views

35:35

Malware Magic: Intel Leads Without Reverse Engineering

SANS Digital Forensics and Incident Response

Shared 1 month ago

222 views

30:43

From Overwhelm to Impact: A Prioritization Matrix

SANS Digital Forensics and Incident Response

Shared 1 month ago

107 views

1:00:04

Stay Ahead of Ransomware: Building an AI-Powered Ransomware Intelligence Agent

SANS Digital Forensics and Incident Response

Shared 1 month ago

721 views

31:19

Extracting the unseen: Real-world RAM acquisition and analysis from Android devices

SANS Digital Forensics and Incident Response

Shared 4 months ago

1.3K views

31:37

Digital forensics and security: Automate audits, investigations and response with AWX and Ansible

SANS Digital Forensics and Incident Response

Shared 4 months ago

685 views

14:13

Tool: Forensic WACE - A multi-threaded tool for forensic analysis of What’s App chats

SANS Digital Forensics and Incident Response

Shared 4 months ago

807 views

29:49

When the threat group doesn’t leave: Incident response under fire

SANS Digital Forensics and Incident Response

Shared 4 months ago

1K views

28:01

Mobile device hardening: A forensic comparison of advanced protection programmes in IOS and Android

SANS Digital Forensics and Incident Response

Shared 4 months ago

957 views

14:14

Tool: Location log analysis of Google Maps IOS

SANS Digital Forensics and Incident Response

Shared 4 months ago

209 views

28:50

PDF forensics and authenticity detection

SANS Digital Forensics and Incident Response

Shared 4 months ago

1K views

30:45

MacOS telemetry vs EDR telemetry - Which is better?

SANS Digital Forensics and Incident Response

Shared 4 months ago

468 views

19:25

Tool: The only ‘Kanvas’ you need when spreadsheets fail your IR case management

SANS Digital Forensics and Incident Response

Shared 4 months ago

288 views

20:19

Home automation and IoT as a source of evidence: Forensic analysis of Home Assistant

SANS Digital Forensics and Incident Response

Shared 4 months ago

295 views

22:08

Hunting payloads in Linux extended file attributes

SANS Digital Forensics and Incident Response

Shared 4 months ago

475 views

25:32

The art of concealment: How cybercriminals are becoming and remaining anonymous

SANS Digital Forensics and Incident Response

Shared 4 months ago

5.9K views

32:20

Applying Modular Design to Maintain IR Playbooks at Scale

SANS Digital Forensics and Incident Response

Shared 8 months ago

1.8K views

33:46

When to Conduct Structured and Unstructured Threat Hunts

SANS Digital Forensics and Incident Response

Shared 8 months ago

1.4K views

47:48

Keynote | DFIR AI-ze Your Workflow

SANS Digital Forensics and Incident Response

Shared 8 months ago

2.4K views

30:14

A North Korean Cyber Operation

SANS Digital Forensics and Incident Response

Shared 8 months ago

901 views

35:11

Strengthening Your Forensic and Response Mindset

SANS Digital Forensics and Incident Response

Shared 8 months ago

1.6K views

29:58

MacOS Endpoint Security Framework

SANS Digital Forensics and Incident Response

Shared 8 months ago

820 views

29:22

MDR to IR Handoffs: Stick The Landing

SANS Digital Forensics and Incident Response

Shared 8 months ago

355 views

23:52

How Threat Actors Persist In Your Microsoft 365

SANS Digital Forensics and Incident Response

Shared 8 months ago

721 views

34:09

Ensuring Data Integrity in Incident Response

SANS Digital Forensics and Incident Response

Shared 8 months ago

355 views

35:16

Finding Relevant Alerts, Events and Logs

SANS Digital Forensics and Incident Response

Shared 8 months ago

565 views

33:09

Investigating a Malicious Script in Microsoft Intune

SANS Digital Forensics and Incident Response

Shared 8 months ago

571 views

32:51

macOS Lockdown Mode: A DFIR Odyssey

SANS Digital Forensics and Incident Response

Shared 8 months ago

422 views

35:07

Forensic Analysis of TAILs

SANS Digital Forensics and Incident Response

Shared 8 months ago

1K views

22:49

Detecting Modern Ransomware Attacks in the Financial Sector

SANS Digital Forensics and Incident Response

Shared 8 months ago

651 views

27:14

Breaking Bad Actors: Transforming Threat Intelligence into RaaS Resilience

SANS Digital Forensics and Incident Response

Shared 10 months ago

683 views

29:09

HS Detecting Initial Access Malware Before It’s Too Late

SANS Digital Forensics and Incident Response

Shared 10 months ago

1K views

44:23

Panel | What’s New in the World of Ransomware in 2025

SANS Digital Forensics and Incident Response

Shared 10 months ago

426 views

28:51

Teams, Scams, and Ransomware: BlackBasta’s Social Engineering Hustle

SANS Digital Forensics and Incident Response

Shared 10 months ago

275 views

28:27

Ransomware TTX | Seven scenarios to include in your next TTX

SANS Digital Forensics and Incident Response

Shared 10 months ago

351 views

10:44

Facing Modern Ransomware Threats and Tackling Multi-Extortion Tactics

SANS Digital Forensics and Incident Response

Shared 10 months ago

185 views

11:57

Zero Trust AI in Ransomware Defense: Reinventing Risk Management

SANS Digital Forensics and Incident Response

Shared 10 months ago

269 views

40:51

Keynote | Adapting Tradecraft: Examining Ransomware Attacks in 2024 - Insights from The DFIR Report

SANS Digital Forensics and Incident Response

Shared 10 months ago

544 views

1:48

Secure Your Spot for DFIRCON Miami 2025 | Cybersecurity Training That Makes an Impact

SANS Digital Forensics and Incident Response

Shared 10 months ago

284 views

1:24

Real-World Network Threat Hunting & Incident Response with SANS FOR572

SANS Digital Forensics and Incident Response

Shared 1 year ago

1.1K views

1:29

From Windows to Linux: Master Incident Response with SANS FOR577

SANS Digital Forensics and Incident Response

Shared 1 year ago

1K views

Next page