Learn how to use the QELP tool to quickly triage ESXi servers. Parse through the relevant logs quickly in order to investigate malicious activity.

Learn how to take a triage image of a *nix based system using the UAC tool.

Learn what Shimcache is, how to analyze it, and why it's misunderstood.

Learn why visibility is everything when responding to an incident.

We've all heard of "Link" or "LNK" files, right? You want a faster way to open your favorite game, document or application without need...