The Forensic Lunch! This week with Willi Ballenthin from the Mandiant FLARE Team talking about their tools

The Forensic Lunch! This week with Sarah Edwards and Jared Barnhart talking about iphone testing labs, app testing and decoding apple photos machine learning identified photo metadata

Forensic Lunch! This week with Jordan Barth talking about Azure and the Cloud!

Forensic Lunch! This week it's time for the second Annual National Collegiate Cyber Defense Competition Redteam AMA!

Forensic Lunch! This week with Google Incident Response Management Team! Learn how Google does IR Management and hear from Joachim Metz, James Nettesheim, Matt Linton and Alex Jager

Forensic Lunch! This week with Eric Zimmerman showing SQLite Explorer and Javier Marcos discussing OSCtrl for OSQuery

Forensic Lunch! This week with Yogesh Kahtri talking about MAC_APT, Brian Moran and Yuri Gubanov from Belkasoft

Forensic Lunch! This week with Michael Cohen doing an hour and a half of Velociraptor!

The Forensic Lunch! This week we are bringing Jad Saliba and Jessica Hyde from Magnet talking about the month of great content they've been hosting and the new things coming out of Magnet. In addition we will have the winner of the Magnet Virtual CTF 2020!

This week on the Forensic Lunch we had:

• Josh Brunty, @joshbrunty,  talking about his DFIR program at Marshall 
• •  https://www.marshall.edu/cyber/
• Tom Pace of Blackberry Cyclance and Jim Arnold of KPMG talking about recent ransomware trends. 
• Kevin Pagano, @kevpagano3,  talking about his Sunday Funday and the Magnet Virtual CTF 
• Jack Farley, @jackfarley248,  talking about MEAT and the Magnet Virtual CTF
• •  https://github.com/jfarley248/MEAT

You can watch it here:

https://youtu.be/fPzSm-hofA0

      This week the Forensic Lunch went into Overtime! We went a full 25 minutes over the usual hour because we had so much to talk about. On this weeks show:

• Matt Seyer (@forensic_matt) talked all about the etl parser and monitor he's working on in Rust! https://github.com/forensicmatt/RsWindowsThingies
• Oleg Skulkin (@oskulkin) talked about how he approaches Sunday Funday's (he's won 3!) and about his new blog post about the Windows FeatureUsage artifact.  https://www.group-ib.com/blog/featureusage
• Brian Marks (@briandfir) talked about how the Office365 UAL MailboxItemsAccessed Audit event works and what the entry details mean  
• Lee Whitfield (@lee_whitfield ) talked through the Forensic 4Cast Awards nominations that end in two weeks, and Matt and I gave who we will be nominating. https://forensic4cast.com/2020/02/2020-forensic-4cast-awards-nominations-are-open/