Golang for DFIR
Discover when Go outperforms Python for security tools and how to make the language switch effectively.
Posts
CTI SquadGoals — Setting Requirements
Transform vague security concerns into specific, actionable intelligence requirements that drive results.
osquery 101 — Getting Started
Introduction to osquery: Facebook’s SQL-based endpoint monitoring framework for Linux and macOS security.
Travel OpSec
Essential operational security practices for international travel including device hardening and threat awareness.
Introduction to DFIR
Comprehensive guide to starting a career in Digital Forensics and Incident Response with practical resources.
Intelligence Concepts — The Intelligence Cycle
Explains the Intelligence Cycle’s six steps with hands-on examples from tracking APT groups.
Crisis Communications for IR (The Preso!)
In September I wrote about Crisis Communications in Incident Responsehttp://sroberts.
FIRST 2015
FIRST 2015 Berlin conference preview with talk recommendations on threat intelligence and incident response.
How I Atom
Personal Atom editor workflow guide with package recommendations and productivity tips for security work.
Intelligence Concepts - The SANS Incident Response Process
Deep dive into the SANS Incident Response Process for structured DFIR operations and lifecycle management.