#dfir
- PDF Phishing Triage
Static-first checklist to quickly classify phishing PDFs, extract redirects, and identify exploit indicators.
- PCAP Analysis Using tshark For Some Malware
Dabbling with light malware analysis. Starting with investigating the PCAP file
- Honey-Pi Notes: Turning a Spare Raspberry Pi into a Cloud DFIR Beacon
Why I turned an idle Raspberry Pi into a honeypot that ships to Azure Log Analytics, plus the tiny set of commands/aliases I’ll actually use.