Filip Fog

[mr.d0x @mrd0x]

Reminder that creating a memory dump of Outlook.exe not only produces access tokens but also potentially sensitive email content.

[SANS.edu Internet Storm Center @sans_isc]

Malicious Code Passed to PowerShell via the Clipboard https://t.co/jeMuzgjEjh

[SANS Cloud Security @SANSCloudSec]

Let us help you create a flight plan that suits you - where you are now and where you want to go in the future.

Review the #SANSCloudAce flight plan here: https://t.co/bsFPB0dRs1

[Filip Fog @FogFilip]

It finally arrived. The #SEC503 coin. An amazing and respected course.
Thanks @johullrich for teaching me how to understand the bits and bytes of network traffic.

[SANS Institute, EMEA @SANSEMEA]

It’s competition time! Here is your chance to win a free SANS Flexi-Pass worth $7,519 USD!

To enter, simply follow @sansemea, retweet this post and tag three friends in the comments. The winners will be announced on 30 July.

What is a SANS Flexi-Pass? https://t.co/KSvidQ18Wn

[Filip Fog @FogFilip]

@SANSEMEA @kimdataequip @Erlendh96 @PiaFog

[Alissa Torres @sibertor]

Congrats to our winning #DFIR team F.A.S.T. @mjciantar @fogfilip @Stormbringer_L & alan saied! Incredible #Day6 analysis & investigative reporting #FOR508 #SANSCybercast (CET) Lethal forensicator coins are heading your way ASAP!

[Filip Fog @FogFilip]

@sibertor @mjciantar @Stormbringer_L Forensic Acronym for Super Team (F. A. S. T) couldn't have done it with our lead investigor @mjciantar. #Kudos

[Filip Fog @FogFilip]

Would like to thank @sibertor for a great week instructing #FOR508 @ #SANSOslo2020
Filled my head with both (EventLog, Memory, Timeline & NTFS) Analysis. Fun & intense moments with advanced real-world scenarios. @sansforensics has delivered what I need to stay up to date. 🦅