What's new?

I was happy to be able to give my "Protecting Privileged Domain Accounts during Live Response" presentation at SANS CDI in Washington, DC.  You can find this latest version of the presentation here. The premise is that we need a way to safely connect to remote compromised machines with privileged domain accounts.  I've done quite a bit of research and found some encouraging results. 

In the coming weeks, I will be posting a series of articles on this subject to the SANS Forensics Blog.  In the meantime, if you have any questions, please shoot me an  email.

On another note, I'm happy to be teaching FORENSICS 408: COMPUTER FORENSIC INVESTIGATIONS - WINDOWS IN-DEPTH from February 6-11 in Miami, FL.  Contact me if you are interested!