The Digital Forensics and Incident Response (DFIR) Report. Real Intrusions by Real Attackers, The Truth Behind the Intrusion. A new report comes out every month! Read the rest of the reports at https://thedfirreport.com/. In addition to our publicly available reports, we provide a range of specialized services to meet your needs, such as private reports, Command and Control tracking, personalized mentoring, and access to an exclusive detection ruleset. Explore our comprehensive offerings on our Services page at https://thedfirreport.com/services/.
We dive into our latest public report with Randy Pargman, Jake Ouellette, Kostas T., and Mangatas Tondang.Report: https://thedfirreport.com/2025/05/19/another-confluence-bites-the-dust-falling-to-elpaco-team-ransomware/Contact Us: https://thedfirreport.com/contact/Services: https://thedfirreport.com/services/Music by FASSounds from Pixabay
Report: https://thedfirreport.com/2025/05/19/another-confluence-bites-the-dust-falling-to-elpaco-team-ransomware/Contact Us: https://thedfirreport.com/contact/Services: https://thedfirreport.com/services/
Report: https://thedfirreport.com/2025/04/28/navigating-through-the-fog/Contact Us: https://thedfirreport.com/contact/Services: https://thedfirreport.com/services/
Report: https://thedfirreport.com/2025/03/31/fake-zoom-ends-in-blacksuit-ransomware/Contact Us: https://thedfirreport.com/contact/Services: https://thedfirreport.com/services/
Report: https://thedfirreport.com/2025/02/24/confluence-exploit-leads-to-lockbit-ransomwareContact Us: https://thedfirreport.com/contact/Services: https://thedfirreport.com/services/
Report: https://thedfirreport.com/2025/01/27/cobalt-strike-and-a-pair-of-socks-lead-to-lockbit-ransomware/ Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/
We discuss our latest report "The Curious Case of an Egg-Cellent Resume" Host: @Kostastsale Analysts: @_pete_0, Zach Stanford (aka @svch0st) Report: https://thedfirreport.com/2024/12/02/the-curious-case-of-an-egg-cellent-resume/ Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/ Music by FASSounds from Pixabay
Report: https://thedfirreport.com/2024/12/02/the-curious-case-of-an-egg-cellent-resume/ Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/
Report: https://thedfirreport.com/2024/10/28/inside-the-open-directory-of-the-you-dun-threat-group Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/
Report: https://thedfirreport.com/2024/09/30/nitrogen-campaign-drops-sliver-and-ends-with-blackcat-ransomware Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/
Report: https://thedfirreport.com/2024/08/26/blacksuit-ransomware/ Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/
Report: https://thedfirreport.com/2024/08/12/threat-actors-toolkit-leveraging-sliver-poshc2-batch-scripts Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/
Report: https://thedfirreport.com/2024/06/10/icedid-brings-screenconnect-and-csharp-streamer-to-alphv-ransomware-deployment/ Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/
We discuss our latest report "From IcedID to Dagon Locker Ransomware in 29 Days" Host: @Kostastsale Analysts: @r3nzsec & @angelo_violetti Special Guest: @nas_bench Report: https://thedfirreport.com/2024/04/29/from-icedid-to-dagon-locker-ransomware-in-29-days/ Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/ Music by FASSounds from Pixabay
Report: https://thedfirreport.com/2024/04/29/from-icedid-to-dagon-locker-ransomware-in-29-days Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/
We discuss our latest report From OneNote to RansomNote: An Ice Cold Intrusion Host: @Kostastsale Analysts: @iiamaleks, @IrishD34TH, & @Miixxedup Special Guest: @techspence Feedback: https://forms.office.com/r/LR9NsEWYye Report: https://thedfirreport.com/2024/04/01/from-onenote-to-ransomnote-an-ice-cold-intrusion/ Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/ Music by FASSounds from Pixabay
We discuss our latest report From OneNote to RansomNote: An Ice Cold Intrusion Host: @Kostastsale Analysts: @iiamaleks, @IrishD34TH, & @Miixxedup Special Guest: @techspence Report: https://thedfirreport.com/2024/04/01/from-onenote-to-ransomnote-an-ice-cold-intrusion/ Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/ Music by FASSounds from Pixabay
Full Report - https://thedfirreport.com/2024/04/01/from-onenote-to-ransomnote-an-ice-cold-intrusion Feedback: https://forms.office.com/r/YY6w3gwd6A
Our first DFIR Discussions podcast on our latest report SEO Poisoning to Domain Control: The Gootloader Saga Continues Host: @Kostastsale Analysts: @_pete_0, @malforsec, & @r3nzsec Special Guest: @HackingLZ Feedback: https://forms.office.com/r/mK2Jp8vPXj Report: https://thedfirreport.com/2024/02/26/seo-poisoning-to-domain-control-the-gootloader-saga-continues/ Contact Us: https://thedfirreport.com/contact/ Services: https://thedfirreport.com/services/ Music by FASSounds from Pixabay
Report - https://thedfirreport.com/2024/02/26/seo-poisoning-to-domain-control-the-gootloader-saga-continues Provide feedback for a chance to win free swag - https://forms.office.com/r/MwZXkBrUNv
Report: https://thedfirreport.com/2024/01/29/buzzing-on-christmas-eve-trigona-ransomware-in-3-hours/ Feedback: https://forms.office.com/r/pPajTA4Vwy
© 2020-2025 Ivy Podcast Discovery LLC
