Inhoud geleverd door Clint Marsden. Alle podcastinhoud, inclusief afleveringen, afbeeldingen en podcastbeschrijvingen, wordt rechtstreeks geüpload en geleverd door Clint Marsden of hun podcastplatformpartner. Als u denkt dat iemand uw auteursrechtelijk beschermde werk zonder uw toestemming gebruikt, kunt u het hier beschreven proces https://nl.player.fm/legal volgen.

TLP - The Digital Forensics Podcast « »
Episode 17 - Building a CTF

17 dagen geleden 28:07

MP3•Thuis aflevering

Send us a text

So You Want to Build Your Own DFIR CTF?

Ever wanted to build your own Digital Forensics and Incident Response (DFIR) Capture the Flag (CTF) challenge but weren’t sure where to start? In this episode of Traffic Light Protocol, we share the how-to of CTF builders, making it easy for anyone—no pentesting skills required!

Today's episode includes:

Choosing Your CTF Theme – Using MITRE ATT&CK and APT tracking to craft a realistic attack scenario.
Setting Up the Lab – Spinning up a Windows VM, configuring Sysmon, and enabling forensic logging.
Running the Attack Simulations – Using Atomic Red Team to generate forensic artifacts.
Testing & Troubleshooting – Making sure your tests actually work before unleashing them on your team.
Building an Engaging Story – Crafting a compelling incident narrative that challenges analysts to think like investigators.

Resources mentioned in the podcast:
https://drive.google.com/drive/folders/1vF3y-OlsowjX9LUOi7ywDy8VgcfhWcUX?usp=sharing

19 afleveringen

#Tech #Clint Marsden #DFIR #Incident Response #Forensic #Cyber #Windows #Hacking #Blue Teaming #Red Team #Auscert

Episode 17 - Building a CTF

TLP - The Digital Forensics Podcast

published 17 dagen geleden