Brakeing Down Incident Response Mon, 27 Oct 2025 21:07:52 +0000 Mon, 27 Oct 2025 21:07:52 +0000 Libsyn RSSgen 1.0 http://brakeingdownir.libsyn.com/website en IMF Security 2018 http://brakeingdownir.libsyn.com/website bds.podcast@gmail.com (bds.podcast@gmail.com) Discussion of Malware Discovery, Basic Analysis, Malware Management and other Incident Response topics. https://static.libsyn.com/p/assets/d/0/a/1/d0a10127340cc96d/BDIR-new.png Brakeing Down Incident Response Brian and Michael no episodic Brakeing Down Incident Response BDIR,Malware,Podcast,HackerHurricane,LOG,MD no info@imfsecurity.comBrian and Michael Episode 010 Episode 010 Thu, 28 Feb 2019 04:09:40 +0000 JOIN US FOR EPISODE-010
Newsworthy Items:
• INSURANCE COMPANY REFUSES TO PAY NOTPETRYA BILL, SAYS IT WAS AN ACT OF WAR, COMPANY SUES FOR $100M
• 2-FACTOR AUTH BYPASSED ???
• 773 MILLLLLION PASSWORDS CIRCULATING THE INTERNET FROM PAST BREACHES
• BYPASS BLACKLISTED WORDS FILTER (OR FIREWALLS) VIA WILDCARDS
Malware of the month - First Sednit UEFI Rootkit Unveiled
Site-worthy - websites of the trade to share
Tool-worthy - some tools of the trade to share
*Topic of the day - To Agent, or not to Agent, that is the question*
Show Notes may be found at:
https://www.imfsecurity.com/podcast/

]]> JOIN US FOR EPISODE-010 Newsworthy Items: • INSURANCE COMPANY REFUSES TO PAY NOTPETRYA BILL, SAYS IT WAS AN ACT OF WAR, COMPANY SUES FOR $100M • 2-FACTOR AUTH BYPASSED ??? • 773 MILLLLLION PASSWORDS CIRCULATING THE INTERNET FROM PAST BREACHES • BYPASS BLACKLISTED WORDS FILTER (OR FIREWALLS) VIA WILDCARDS Malware of the month - First Sednit UEFI Rootkit Unveiled Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share *Topic of the day - To Agent, or not to Agent, that is the question* Show Notes may be found at: https://www.imfsecurity.com/podcast/

]]> 01:18:54 false full info@imfsecurity.com (Brian and Michael)Brian and MichaelJOIN US FOR EPISODE-010 Newsworthy Items: • INSURANCE COMPANY REFUSES TO PAY NOTPETRYA BILL, SAYS IT WAS AN ACT OF WAR, COMPANY SUES FOR $100M • 2-FACTOR AUTH BYPASSED ??? • 773 MILLLLLION PASSWORDS CIRCULATING THE INTERNET FROM PAST BREACHES • BYPASS BLACKLISTED WORDS FILTER (OR FIREWALLS) VIA WILDCARDS Malware of the month - First Sednit UEFI Rootkit Unveiled Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share *Topic of the day - To Agent, or not to Agent, that is the question* Show Notes may be found at: https://www.imfsecurity.com/podcast/ BDIR-009 BDIR-009 Thu, 27 Dec 2018 03:48:09 +0000 JOIN US FOR EPISODE-009:
We will discuss MITRE ATT&CK - Part 2
Newsworthy Items:
Over 1 BILLION Pwned
Dell Breach
Marriott/Starwood Breach
Malware of the month - LOKIBot
Site-worthy - websites of the trade to share
Tool-worthy - some tools of the trade to share
Topic of the day - TORA TORA TORA - MITRE ATT&CK Part 2
Show Notes may be found at:
https://www.BDIRPodcast.com/podcast/

]]> JOIN US FOR EPISODE-009: We will discuss MITRE ATT&CK - Part 2 Newsworthy Items: Over 1 BILLION Pwned Dell Breach Marriott/Starwood Breach Malware of the month - LOKIBot Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share Topic of the day - TORA TORA TORA - MITRE ATT&CK Part 2 Show Notes may be found at: https://www.BDIRPodcast.com/podcast/

]]> 59:44 false full info@imfsecurity.com (Brian and Michael)Brian and MichaelJOIN US FOR EPISODE-009: We will discuss MITRE ATT&CK - Part 2 Newsworthy Items: Over 1 BILLION Pwned Dell Breach Marriott/Starwood Breach Malware of the month - LOKIBot Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share Topic of the day - TORA TORA TORA - MITRE ATT&CK Part 2 Show Notes may be found at: https://www.BDIRPodcast.com/podcast/ BDIR-008 BDIR-008 Mon, 15 Oct 2018 04:40:59 +0000 EPISODE-008
"EPIC FAILURE, Who Do You Blame? You decide"

Newsworthy Items:
1. NSS Labs fires off anti-malware-testing lawsuit at infosec toolmakers
2. Gartner says EDR will be a 1.5 BILLION, with a B business by 2020
3. Forrester Report on is EDR overblown

Topic of the day - "EPIC FAILURE, Who Do You Blame? You decide"

Show Notes may be found at:
https://www.imfsecurity.com/podcast/ (edited)

]]> EPISODE-008 "EPIC FAILURE, Who Do You Blame? You decide"

Newsworthy Items: 1. NSS Labs fires off anti-malware-testing lawsuit at infosec toolmakers 2. Gartner says EDR will be a 1.5 BILLION, with a B business by 2020 3. Forrester Report on is EDR overblown

Topic of the day - "EPIC FAILURE, Who Do You Blame? You decide"

Show Notes may be found at: https://www.imfsecurity.com/podcast/ (edited)

]]> 51:30 false full info@imfsecurity.com (Brian and Michael)Brian and MichaelEPISODE-008 "EPIC FAILURE, Who Do You Blame? You decide" Newsworthy Items: 1. NSS Labs fires off anti-malware-testing lawsuit at infosec toolmakers 2. Gartner says EDR will be a 1.5 BILLION, with a B business by 2020 3. Forrester Report on is EDR overblown Topic of the day - "EPIC FAILURE, Who Do You Blame? You decide" Show Notes may be found at: https://www.imfsecurity.com/podcast/ (edited) BDIR-007 BDIR-007 Mon, 17 Sep 2018 19:13:18 +0000 JOIN US FOR EPISODE-007, OUR GUEST WILL BE:

Katie Nickels, ATT&CK Threat Intelligence Lead, MITRE and will discuss with us:
"A little known guide of hacking tactics - ATT&CK - PART 1 (TORA TORA TORA)"

Newsworthy Items:
-----------------------
After Sept 21st Credit Freezes are FREEEEEE - Article - by Krebs
"Do you use a Tumi bag? Registered it with Tumi's Tracer service?
British airways website hacked 380K users affected
How Hackers Slipped by British Airways' Defenses - Wired
Hackers Can Steal a Tesla Model S in Seconds by Cloning Its Key Fob - WIRED
Exploit vendor drops Tor Browser zero-day on Twitter - zdnet
Bad Actors Sizing Up Systems Via Lightweight Recon Malware

Site-worthy - websites of the trade to share
Tool-worthy - some tools of the trade to share

Malware of the month - EMOTET

Topic of the day - "A little known guide of hacking tactics - ATT&CK - PART 1 (TORA TORA TORA)"
---------------------------------------------------------------------------------------------------------------------
Show Notes may be found at:
https://www.imfsecurity.com/podcast/ (edited)

]]> JOIN US FOR EPISODE-007, OUR GUEST WILL BE:

Katie Nickels, ATT&CK Threat Intelligence Lead, MITRE and will discuss with us: "A little known guide of hacking tactics - ATT&CK - PART 1 (TORA TORA TORA)"

Newsworthy Items: ----------------------- After Sept 21st Credit Freezes are FREEEEEE - Article - by Krebs "Do you use a Tumi bag? Registered it with Tumi's Tracer service? British airways website hacked 380K users affected How Hackers Slipped by British Airways' Defenses - Wired Hackers Can Steal a Tesla Model S in Seconds by Cloning Its Key Fob - WIRED Exploit vendor drops Tor Browser zero-day on Twitter - zdnet Bad Actors Sizing Up Systems Via Lightweight Recon Malware

Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share

Malware of the month - EMOTET

Topic of the day - "A little known guide of hacking tactics - ATT&CK - PART 1 (TORA TORA TORA)" --------------------------------------------------------------------------------------------------------------------- Show Notes may be found at: https://www.imfsecurity.com/podcast/ (edited)

]]> 01:06:17 false full info@imfsecurity.com (Brian and Michael)Brian and MichaelJOIN US FOR EPISODE-007, OUR GUEST WILL BE: Katie Nickels, ATT&CK Threat Intelligence Lead, MITRE and will discuss with us: "A little known guide of hacking tactics - ATT&CK - PART 1 (TORA TORA TORA)" Newsworthy Items: ----------------------- After Sept 21st Credit Freezes are FREEEEEE - Article - by Krebs "Do you use a Tumi bag? Registered it with Tumi's Tracer service? British airways website hacked 380K users affected How Hackers Slipped by British Airways' Defenses - Wired Hackers Can Steal a Tesla Model S in Seconds by Cloning Its Key Fob - WIRED Exploit vendor drops Tor Browser zero-day on Twitter - zdnet Bad Actors Sizing Up Systems Via Lightweight Recon Malware Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share Malware of the month - EMOTET Topic of the day - "A little known guide of hacking tactics - ATT&CK - PART 1 (TORA TORA TORA)" --------------------------------------------------------------------------------------------------------------------- Show Notes may be found at: https://www.imfsecurity.com/podcast/ (edited) BDIR Episode 006 BDIR Episode 006 Sun, 26 Aug 2018 22:50:38 +0000 JOIN US FOR EPISODE-006, OUR GUEST WILL BE:
Jim Schwar, Lead Analyst (Cybersecurity) will discuss with us "Logging - How many tricks does it take to get to the center of a Log-iPop?"

Newsworthy Items:
The most expensive Cyber attack EVER !!! (wired)
City of Atlanta 17 million ransom attack
APT32 proves what we say about logging - Monitor Scheduled Tasks

Malware of the month - None, so send us something interesting...

Site-worthy - websites of the trade to share

Tool-worthy - some tools of the trade to share

Topic of the day - Logging - How many tricks does it take to get to the center of a Log-iPop?

Show Notes may be found at:

https://www.imfsecurity.com/podcast/

]]> JOIN US FOR EPISODE-006, OUR GUEST WILL BE: Jim Schwar, Lead Analyst (Cybersecurity) will discuss with us "Logging - How many tricks does it take to get to the center of a Log-iPop?"

Newsworthy Items: The most expensive Cyber attack EVER !!! (wired) City of Atlanta 17 million ransom attack APT32 proves what we say about logging - Monitor Scheduled Tasks

Malware of the month - None, so send us something interesting...

Site-worthy - websites of the trade to share

Tool-worthy - some tools of the trade to share

Topic of the day - Logging - How many tricks does it take to get to the center of a Log-iPop?

Show Notes may be found at:

https://www.imfsecurity.com/podcast/

]]> 01:30:19 false full info@imfsecurity.com (Brian and Michael)Brian and MichaelJOIN US FOR EPISODE-006, OUR GUEST WILL BE: Jim Schwar, Lead Analyst (Cybersecurity) will discuss with us "Logging - How many tricks does it take to get to the center of a Log-iPop?" Newsworthy Items: The most expensive Cyber attack EVER !!! (wired) City of Atlanta 17 million ransom attack APT32 proves what we say about logging - Monitor Scheduled Tasks Malware of the month - None, so send us something interesting... Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share Topic of the day - Logging - How many tricks does it take to get to the center of a Log-iPop? Show Notes may be found at: https://www.imfsecurity.com/podcast/ BDIR-005 - WMI Exploitation and Detection BDIR-005 - WMI Exploitation and Detection Tue, 10 Jul 2018 18:18:29 +0000 JOIN US FOR EPISODE-005, OUR GUEST WILL BE:

Chris Truncer with FortyNorthSec and author of WMImplant will discuss with us "WMI - Exploitation and Detection"

Newsworthy Items - New Sysmon and Autoruns versions released. Be careful of VirusTotal uploads
Malware of the month - None, so send us something interesting...
Site-worthy - websites of the trade to share
Tool-worthy - some tools of the trade to share
Topic of the day - WMI - Exploitation and Detection

Show Notes may be found at:
https://www.imfsecurity.com/podcast/ (edited)

]]> JOIN US FOR EPISODE-005, OUR GUEST WILL BE:

Chris Truncer with FortyNorthSec and author of WMImplant will discuss with us "WMI - Exploitation and Detection"

Newsworthy Items - New Sysmon and Autoruns versions released. Be careful of VirusTotal uploads Malware of the month - None, so send us something interesting... Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share Topic of the day - WMI - Exploitation and Detection

Show Notes may be found at: https://www.imfsecurity.com/podcast/ (edited)

]]> 01:36:56 false full info@imfsecurity.com (Brian and Michael)Brian and MichaelJOIN US FOR EPISODE-005, OUR GUEST WILL BE: Chris Truncer with FortyNorthSec and author of WMImplant will discuss with us "WMI - Exploitation and Detection" Newsworthy Items - New Sysmon and Autoruns versions released. Be careful of VirusTotal uploads Malware of the month - None, so send us something interesting... Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share Topic of the day - WMI - Exploitation and Detection Show Notes may be found at: https://www.imfsecurity.com/podcast/ (edited) BDIR EP-004 BDIR EP-004 Wed, 06 Jun 2018 01:21:02 +0000  

JOIN US FOR EPISODE-004, OUR GUESTS WILL BE:

Pieter Heyn and Kresten Krab with Humio will discuss with us Cloud based Log Management and/or On-Prem Log Management

Newsworthy Items - The FBI asks us to reboot our routers
Malware of the month - None, so send us something interesting...
Site-worthy - websites of the trade to share
Tool-worthy - some tools of the trade to share
Topic of the day - Cloud based Log Management and/or On-Prem Log Management (edited)

 

https://www.imfsecurity.com/podcast/

]]>  

JOIN US FOR EPISODE-004, OUR GUESTS WILL BE:

Pieter Heyn and Kresten Krab with Humio will discuss with us Cloud based Log Management and/or On-Prem Log Management

Newsworthy Items - The FBI asks us to reboot our routers Malware of the month - None, so send us something interesting... Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share Topic of the day - Cloud based Log Management and/or On-Prem Log Management (edited)

 

https://www.imfsecurity.com/podcast/

]]> 01:14:55 false full info@imfsecurity.com (Brian and Michael)Brian and Michael  JOIN US FOR EPISODE-004, OUR GUESTS WILL BE: Pieter Heyn and Kresten Krab with Humio will discuss with us Cloud based Log Management and/or On-Prem Log Management Newsworthy Items - The FBI asks us to reboot our routers Malware of the month - None, so send us something interesting... Site-worthy - websites of the trade to share Tool-worthy - some tools of the trade to share Topic of the day - Cloud based Log Management and/or On-Prem Log Management (edited)   https://www.imfsecurity.com/podcast/ BDIR Episode - 003 BDIR Episode - 003 Tue, 01 May 2018 14:05:52 +0000 Our guest will be:

Lesley Carhart - Principal Threat Hunter at Dragos Inc.

Topic of the Day:
The Incident Response Process, - Program, Plan, Policy, Process, Playbooks, and roles
Show Notes:

Introductions
Introduce our Guest
Twitter: @Hacks4Pancakes
Blog: www.tisiphone.net

News-Worthy
Site-Worthy
Tool-Worthy
Topic of the Day

]]> Our guest will be:

Lesley Carhart - Principal Threat Hunter at Dragos Inc.

Topic of the Day: The Incident Response Process, - Program, Plan, Policy, Process, Playbooks, and roles Show Notes:

Introductions Introduce our Guest Twitter: @Hacks4Pancakes Blog: www.tisiphone.net

News-Worthy Site-Worthy Tool-Worthy Topic of the Day

]]> 01:27:23 false full info@imfsecurity.com (Brian and Michael)Brian and MichaelOur guest will be: Lesley Carhart - Principal Threat Hunter at Dragos Inc. Topic of the Day: The Incident Response Process, - Program, Plan, Policy, Process, Playbooks, and roles Show Notes: Introductions Introduce our Guest Twitter: @Hacks4Pancakes Blog: www.tisiphone.net News-Worthy Site-Worthy Tool-Worthy Topic of the Day BDIR Episode - 002 BDIR Episode - 002 Sun, 01 Apr 2018 20:00:29 +0000 BDIR Episode - 002

Our guests will be:

David Longenecker - InfoSec Practioner

Topic of the Day:
Windows Logging: Who, What, Where, When, Why
Show Notes:

Introductions
Introduce our Guest
Twitter: @dnlongen
Blog: SecurityForRealPeople.com
GitHub - https://github.com/dnlongen

News-Worthy
Site-Worthy
Tool-Worthy
Topic of the Day (edited)

]]> BDIR Episode - 002

Our guests will be:

David Longenecker - InfoSec Practioner

Topic of the Day: Windows Logging: Who, What, Where, When, Why Show Notes:

Introductions Introduce our Guest Twitter: @dnlongen Blog: SecurityForRealPeople.com GitHub - https://github.com/dnlongen

News-Worthy Site-Worthy Tool-Worthy Topic of the Day (edited)

]]> 02:03:46 false full info@imfsecurity.com (Brian and Michael)Brian and MichaelBDIR Episode - 002 Our guests will be: David Longenecker - InfoSec Practioner Topic of the Day: Windows Logging: Who, What, Where, When, Why Show Notes: Introductions Introduce our Guest Twitter: @dnlongen Blog: SecurityForRealPeople.com GitHub - https://github.com/dnlongen News-Worthy Site-Worthy Tool-Worthy Topic of the Day (edited) BDIR-001: Credential stealing emails, How do you protect against it? BDIR-001: Credential stealing emails, How do you protect against it? Thu, 01 Mar 2018 15:00:56 +0000 BDIR Episode - 001

Our guests will be:

Martin Brough - Manager of the Security Solutions Engineering team in the #email #phishing industry
Topic of the Day:

CREDENTIAL STEALING EMAILS WHAT CAN YOU DO

 

Join us for Episode-001, our guest will be:

  • Martin Brough - Manager of the Security Solutions Engineering team in the email phishing industry

Topic of the day will be:

"CREDENTIAL STEALING EMAILS WHAT CAN YOU DO"

Show Notes:

  • Introductions
  • Introduce our Guest
    • Martin Brough
      • Twitters - @HackerNinja
      • Blog - InfoSec512.com

 

More show notes at https://www.imfsecurity.com/podcasts/2018/2/28/bdir-podcast-episode-001

 

]]> BDIR Episode - 001

Our guests will be:

Martin Brough - Manager of the Security Solutions Engineering team in the #email #phishing industry Topic of the Day:

CREDENTIAL STEALING EMAILS WHAT CAN YOU DO

 

Join us for Episode-001, our guest will be:

  • Martin Brough - Manager of the Security Solutions Engineering team in the email phishing industry

Topic of the day will be:

"CREDENTIAL STEALING EMAILS WHAT CAN YOU DO"

Show Notes:

  • Introductions
  • Introduce our Guest
    • Martin Brough
      • Twitters - @HackerNinja
      • Blog - InfoSec512.com

 

More show notes at https://www.imfsecurity.com/podcasts/2018/2/28/bdir-podcast-episode-001

 

]]> 01:35:37 false full info@imfsecurity.com (Brian and Michael)Brian and MichaelBDIR Episode - 001 Our guests will be: Martin Brough - Manager of the Security Solutions Engineering team in the #email #phishing industry Topic of the Day: CREDENTIAL STEALING EMAILS WHAT CAN YOU DO   Join us for Episode-001, our guest will be: Martin Brough - Manager of the Security Solutions Engineering team in the email phishing industry Topic of the day will be: "CREDENTIAL STEALING EMAILS WHAT CAN YOU DO" Show Notes: Introductions Introduce our Guest Martin Brough Twitters - @HackerNinja Blog - InfoSec512.com   More show notes at https://www.imfsecurity.com/podcasts/2018/2/28/bdir-podcast-episode-001   BDIR-000 ; The beginning BDIR-000 ; The beginning Mon, 29 Jan 2018 16:37:24 +0000 BDIR Episode - 000

Our guests will be:

Dave Cowen - Forensic Lunch Podcast and G-C Partners
Tyler Hudak - Trainer in Malware Analysis and Reverse Engineering

Topic of the Day:

WHAT IS THIS NEW PODCAST ALL ABOUT, WHAT WILL IT COVER?

"Incident Response, Malware Discovery, and Basic Malware Analysis,
Detection and Response, Active Defense, Threat Hunting, and where does it fit within DFIR"

SHOW NOTES:
https://www.imfsecurity.com/podcast/2018/1/18/bdir-podcast-episode-000

]]> BDIR Episode - 000

Our guests will be:

Dave Cowen - Forensic Lunch Podcast and G-C Partners Tyler Hudak - Trainer in Malware Analysis and Reverse Engineering

Topic of the Day:

WHAT IS THIS NEW PODCAST ALL ABOUT, WHAT WILL IT COVER?

"Incident Response, Malware Discovery, and Basic Malware Analysis, Detection and Response, Active Defense, Threat Hunting, and where does it fit within DFIR"

SHOW NOTES: https://www.imfsecurity.com/podcast/2018/1/18/bdir-podcast-episode-000

]]> 01:04:54 false full info@imfsecurity.com (Brian and Michael)Brian and MichaelBDIR Episode - 000 Our guests will be: Dave Cowen - Forensic Lunch Podcast and G-C Partners Tyler Hudak - Trainer in Malware Analysis and Reverse Engineering Topic of the Day: WHAT IS THIS NEW PODCAST ALL ABOUT, WHAT WILL IT COVER? "Incident Response, Malware Discovery, and Basic Malware Analysis, Detection and Response, Active Defense, Threat Hunting, and where does it fit within DFIR" SHOW NOTES: https://www.imfsecurity.com/podcast/2018/1/18/bdir-podcast-episode-000