Incident Response Courses
Bill Buchanan OBE via YouTube Automating Incident Response: Scalable and Fast, Within Minutes
SANS via YouTube Llama: The Fast-File Processor with No Drama
SANS via YouTube How Persistent is an APT? Battling Three Threat Actors in a Single Environment
SANS via YouTube Understanding the Principal Part in GCP Cloud Audit Logs
SANS via YouTube Forensic Analysis of Compromised VPN Appliances by Advanced Actors
SANS via YouTube Extracting Forensic Artifacts from Seemingly Idle iOS Devices - Dormant Devices, Chatty Logs
SANS via YouTube The SaaS-y Side of Incident Response - Key Log Sources for Okta, GitHub, and Salesforce
SANS via YouTube Incident Response and Recovery
(ISC)² via Coursera Leveraging Microsoft Defender for Identity - Capabilities and Integration
John Savill's Technical Training via YouTube