Forensic Pro

The #1 thing you need to have before an incident? Authority. If you can't push immediate changes when you need them, everything else fails.

@cyber5w I refer to the forensic report as “The Just the Facts”. We can tell who, what, when, where- can’t always discern the why-without assumptions.

Is a forensic report an opinion or a proof ? In digital forensics, opinions don’t matter.. evidence does. Facts, data, and verified traces are what turn investigations into proof, not assumptions. #DigitalForensics #Cyber5W #OpinionVsProof #ForensicEvidence #DFIR #CyberSecurity #EvidenceBased #TruthInData #ForensicsTraining #CyberInvestigation

Nerdssss, we made it to Fri-Yay! Whatcha up to this weekend? Gif replies only

@Wayne_Bridgeman BonJovi for the win!!! twitter.com/Forensic_Pro/s…

How was everyone’s flight to Vegas? #BlackHat

I’ve been off Twitter since 2018. What did I miss?

Heyooo nerds! Happy Fri-Yay! Whatcha up to this weekend? Gif replies only

Nerdssssss, happy Fri-Yay! Whatcha doing this weekend? Gif replies only.

Heyo nerds! Happy Fri-Yay to you! Whatcha up to this weekend? Gif replies only

Sup nerds? We made it to Fri-Yay! Whatcha up to this weekend? Gif replies only.

@JC_SoCal @snowfensive Way to go Snow Team!!!

Getting ready for our @snowfensive annual meeting this month and I noticed we became an official LLC March 2016. Which makes this month our 5 year anniversary! A huge #SmallBiz milestone! We personally funded this company and have still have no debt & we have big things coming!

@vagab0ndsec @subTee @CodiStarks2 @Francisckrs @_bromiley @shortxstack @eric_capuano @Recon_InfoSec @ItsReallyNick @cglyer @NoLogsNoCrime @EricRZimmerman @sansforensics Go get 'em Ted

@subTee these are just a few of the peeps who have had a positive impact on my learning in the last year... @CodiStarks2 @Francisckrs @_bromiley @shortxstack @eric_capuano @Recon_InfoSec #openSOC @ItsReallyNick @cglyer @NoLogsNoCrime @EricRZimmerman @sansforensics

I’m excited to announce I will be joining Rapid7 in an IR consulting role starting Monday. There are many DFIR peeps out there that I owe gratitude to for building/learning and working together. I cannot possibly tag everyone individually- thank you all!!

@JC_SoCal I was telling my partner in crime that you were gonna be surprised :)

I didn't scan my badge at ANY blackhat booth this year -- was very proud of myself. Then I let @Forensic_Pro borrow my badge for the last day while I rotated to DEFCON ... and now my email and phone is blowing up ... How much swag did he get lol!!

Looking forward to catching up with everyone at #LegalSec2018 twitter.com/kudelskisec/st…

"An organization’s ability to recover quickly in the wake of a #cyberattack is directly proportional to their incident response capabilities" Read @KudelskiSec managing dir. of incident response & cyber resilience Darrell Switzer's thoughts in @InfosecEdu hubs.ly/H0bq61K0

Spent some time with the InfoSec Institute out of Chicago discussing Incident Response Planning. resources.infosecinstitute.com/expert-tips-in…

@_sn0ww No one in my family will share their USB/camera cards with me. Weird.

UtahSec! We’re meeting tomorrow evening in Riverton. Please come!! It’s not a normal meeting. We’ll be planning the year, and making changes to the org. We want everyone there, as much as possible. Please RT.

@_sn0ww ✈️🚈🚖🚘🚔

@_sn0ww I sat next to @JC_SoCal one time. It could be worse.

@_sn0ww @sno0ose A few on the monitor or phone. Most in plain text txt files on the desktop.

It's IR Friday!! Does your team have a plan? kudelskisecurity.com/services/advis…