The Forensic Lunch with David Cowen and Matthew Seyer
Activity Overview
Episode publication activity over the past year
Episodes
Forensic Lunch 8-28-20
09 Sep 2020
Contributed by Lukas
The Forensic Lunch! This week with Willi Ballenthin from the Mandiant FLARE Team talking about their tools
Forensic Lunch 8-14-20
09 Sep 2020
Contributed by Lukas
The Forensic Lunch! This week with Sarah Edwards and Jared Barnhart talking about iphone testing labs, app testing and decoding apple photos machine ...
Forensic Lunch 7-24-20
09 Sep 2020
Contributed by Lukas
Forensic Lunch! This week with Jordan Barth talking about Azure and the Cloud!
Forensic Lunch 6-26-20
09 Sep 2020
Contributed by Lukas
Forensic Lunch! This week it's time for the second Annual National Collegiate Cyber Defense Competition Redteam AMA!
Forensic Lunch 6-19-20
09 Sep 2020
Contributed by Lukas
Forensic Lunch! This week with Google Incident Response Management Team! Learn how Google does IR Management and hear from Joachim Metz, James Nettes...
Forensic Lunch 6-12-20
09 Sep 2020
Contributed by Lukas
Forensic Lunch! This week with Eric Zimmerman showing SQLite Explorer and Javier Marcos discussing OSCtrl for OSQuery
Forensic Lunch 5-29-20
09 Sep 2020
Contributed by Lukas
Forensic Lunch! This week with Yogesh Kahtri talking about MAC_APT, Brian Moran and Yuri Gubanov from Belkasoft
Forensic Lunch 5-22-20
09 Sep 2020
Contributed by Lukas
Forensic Lunch! This week with Michael Cohen doing an hour and a half of Velociraptor!
Forensic Lunch 5-15-20
09 Sep 2020
Contributed by Lukas
The Forensic Lunch! This week we are bringing Jad Saliba and Jessica Hyde from Magnet talking about the month of great content they've been hosting a...
Forensic Lunch 5/8/20 - Jack Farley, Josh Brunty, Kevin Pagano, Tom Pace, Jim Arnold
09 May 2020
Contributed by Lukas
This week on the Forensic Lunch we had: Josh Brunty, @joshbrunty, talking about his DFIR program at Marshall https://www.marshall.edu/cyber/ ...
Forensic Lunch 5/1/20 - Oleg Skulkin (FeatureUsage), Brian Marks (Office 365) , Lee Whitfield 4CAST
01 May 2020
Contributed by Lukas
This week the Forensic Lunch went into Overtime! We went a full 25 minutes over the usual hour because we had so much to talk about. On thi...
Forensic Lunch 4/24/20 with the Google IR Team (GRR, Timesketch, Turbinia, DTTimewolf, More!)
24 Apr 2020
Contributed by Lukas
We had a jam packed Forensic Lunch today with a portion of the Google IR team today talking all about the open source tools they develop, use and s...
Forensic Lunch 4/17/20 with Zach Wasserman
17 Apr 2020
Contributed by Lukas
Today on the Forensic Lunch we only had one guest, Zach Wasserman, from OSQuery technical steering committee. We only had one guest because we knew...
Forensic Lunch 4/10/20 with Belkasoft, AWS IR Automation, MVS DFIRFIT and HTTP Security Headers
15 Apr 2020
Contributed by Lukas
What a great Forensic Lunch today! On today's broadcast we had: Yuri Gubanov (@belkasoft) giving an update about whats going on at Belkasoft. Includin...
Forensic Lunch 4/3/20
15 Apr 2020
Contributed by Lukas
On this episode: Mari Degrazia (@MariDegrazia) discussing her research into WinSCP and later movement, you can read more here: http://az4n6.blogs...
Forensic Lunch 12/13/19 - CTI Summit
15 Apr 2020
Contributed by Lukas
Live with Rick Holland, Ryan Johnson and Evan Dygert
Forensic Lunch 10/25/19 - Champlain DFA Defcon DFIR CTF - Martin Korman - Regipy
15 Apr 2020
Contributed by Lukas
The Forensic Lunch! This week with the Champlain Digital Forensics Association talking about the Defcon DFIR CTF and Martin Korman talking about his p...
Forensic Lunch 7/19/19 with Alex Levinson
15 Apr 2020
Contributed by Lukas
This week with Alex Levinson from Uber
Forensic Lunch 5/3/19 CCDC AMA Live
15 Apr 2020
Contributed by Lukas
The Forensic Lunch! Sli.do link https://app2.sli.do/event/hzkazryr/live/questions This broadcast we are doing a live AMA from Reddit all about the NCC...
Forensic Lunch 4/3/19 Live from MUS 2019
15 Apr 2020
Contributed by Lukas
The Forensic Lunch! Live from the Magnet User Summit 2019!
Forensic Lunch 3/20/20 - Lance Spitzner and Jessica Hyde
15 Apr 2020
Contributed by Lukas
with Lance Spitzner talking about Sans Live Online, Jessica Hyde talking about the Magnet Virtual Summit
Forensic Lunch 3/8/19 Eric Zimmerman, Lee Whitfield , Kape, Forensic 4Cast, Nominations
15 Apr 2020
Contributed by Lukas
The Forensic Lunch 3/8/19! The twice a month, usually, podcast/videocast that's all about DFIR This week we have: Eric Zimmerman, talking about KAPE L...
Forensic Lunch 2/21/20 - Anzac Edition
15 Apr 2020
Contributed by Lukas
Forensic Lunch ANZAC edition with Michael Cohen talking about Velociraptor Shanna Daly talking about her work in Australia Phil Moore, Nick Klein talk...
Forensic Lunch 2/7/20 - Blackbag Update
15 Apr 2020
Contributed by Lukas
Forensic Lunch with Sarah Edwards, Ashley Hernandez , Dr Joe Sylve catching us up with the new combined Celebrite/Blackbag
Forensic Lunch 2/1/19 Blanche Lagny Amcache DFIR Review
15 Apr 2020
Contributed by Lukas
The Forensic Lunch 2/1/19! The twice a month, usually, podcast/videocast that's all about DFIR This week we have: Blanche Lagny talking about her pape...
Forensic Lunch 1/24/20 - Ryan Benson, Jessica Hyde and Aaron Sparling
15 Apr 2020
Contributed by Lukas
Forensic Lunch! Live with Ryan Benson talking about Unfurl, Jessica Hyde and Aaron Sparling talking about Memory forensics
Forensic Lunch 1/10/20 with Lee Whitfield
15 Apr 2020
Contributed by Lukas
This week Lee Whitfield joins us to discuss the DFIR Summit and Matt showed us his rust based live windows monitors for DFIR Research
Forensic Lunch 6/15/18
15 Jun 2018
Contributed by Lukas
The Forensic Lunch! Live this week with jaco_za who walked us through how he won the Magnet User Summit CTF we built.
Forensic Lunch 6/8/18
15 Jun 2018
Contributed by Lukas
Live from the DFIR Summit in Austin, Texas. This short episode we had Rob Lee talking about the new Windows Forensics Poster and Lee Whitfield talk...
Forensic Lunch 5/21/18
23 May 2018
Contributed by Lukas
Live from the Magnet User Summit in Las Vegas with Jessica Hyde, Heather Mahalik, Jad Saliba, Matthew Seyer and David Cowen
Forensic Lunch 5/18/18
20 May 2018
Contributed by Lukas
Live with Jason Jordaan talking about DFIR in South Africa, James Cooksey talking about Belkasoft, Troy Schnack talking about his work and being nomin...
Forensic Lunch 5/4/18
20 May 2018
Contributed by Lukas
Live with Maxime Lamothe-Brassard, Nicole Ibrahim, Matthew Seyer and David Cowen talking about ETLs, the SANS DFIR Summit, and Lima Charlie
Forensic Lunch 4/20/18
20 May 2018
Contributed by Lukas
Live with Lee Whitfield, Matthew Seyer and David Cowen talking about the Forensic 4Cast award Nominees
Forensic Lunch: 4/6/18
20 May 2018
Contributed by Lukas
The Forensic Lunch live with Matthew Seyer and David Cowen talking about how Office saves files and more testing
Forensic Lunch 3/9/18
20 May 2018
Contributed by Lukas
Live with Maxim Suhanov (@errno_fail), Matthew Seyer and David Cowen talking about Registry Forensics, Transactional Registry logs and his library YAR...
Forensic Lunch 3/2/18
20 May 2018
Contributed by Lukas
Live with Eric Zimmerman, Matthew Seyer and David Cowen talking about Registry Explorer and transactional registries
Forensic Lunch 2/23/18
20 May 2018
Contributed by Lukas
Live with Phill Moore, Dr. Bradley Schatz, Matthew Seyer and David Cowen talking about This week in forensics and Evimetry
Forensic Lunch 2/16/18
20 May 2018
Contributed by Lukas
Live with Ashley Hernandez, Joe Sylve, Matthew Seyer and David Cowen talking about Blacklight and Blackbag
Forensic Lunch 1/26/18
20 May 2018
Contributed by Lukas
Forensic Lunch Live with Devon Ackerman, Matthew Seyer and David Cowen. Devon Ackerman presented on Office365 forensics
Forensic Lunch 1/19/18
20 May 2018
Contributed by Lukas
Forensic Lunch Live with Lee Whitfield, Matthew Seyer and David Cowen
Forensic Lunch Test Kicthen 12/7/17
20 May 2018
Contributed by Lukas
Forensic Lunch Test Kitchen live DFIR testing on 12/7/17
Forensic Lunch Test Kitchen 12/6/17
20 May 2018
Contributed by Lukas
Forensic Lunch Test Kitchen live DFIR testing on 12/6/17
Forensic Lunch Test Kitchen 12/5/17
20 May 2018
Contributed by Lukas
Forensic Lunch Test Kitchen live DFIR testing on 12/5/17
Forensic Lunch Test Kitchen 12/4/17
20 May 2018
Contributed by Lukas
The Forensic Lunch Test Kitchen 12/4/17, live testing of forensic artifacts
Forensic Lunch 10/17/17
20 May 2018
Contributed by Lukas
The Forensic Lunch live with Mark Mckinnon, Brian Moran, Brian Carrier and Jessica Hyde
Forensic Lunch 10/13/17
20 May 2018
Contributed by Lukas
The Forensic Lunch live with Rebekah Brown
Forensic Lunch 8/18/17
20 May 2018
Contributed by Lukas
The Forensic Lunch with Chuck Norris, correlation in Arrango DB and shellbags testing
Forensic Lunch 8/11/17
20 May 2018
Contributed by Lukas
Forensic Lunch With Elizabeth Schweinsberg talking about DFRWS
Forensic Lunch 7/14/17
20 May 2018
Contributed by Lukas
The Forensic Lunch with Mary Ellen Kennel and Devon Ackerman talking about the AbourDFIR project
Forensic Lunch 5/26/17
18 May 2018
Contributed by Lukas
This week Jessica Hyde and Brian Moran joined us talking about their research into Amazon Alexa and Google Home.
Forensic Lunch 5/25/17
18 May 2018
Contributed by Lukas
Live From Enfuse Day 3! This week with Lesley Carhart, @hacks4pancakes talking about being the very first Women in Technology solving for X award pres...
Forensic Lunch 5/24/17
18 May 2018
Contributed by Lukas
Steve Whalen from Sumuri, Jake Williams from Rendition Infosec and Dmitry Sumin from Passware
Forensic Lunch 5-23-17
17 May 2018
Contributed by Lukas
Live with Amber Shroader of Paraben, Matt Bromiley from SANS, Matt Mcfadden Director of training from Opentext/Guidance
Forensic Lunch 5/19/17
19 May 2017
Contributed by Lukas
The Forensic Lunch! This week we had: Cindy Murphy, @CindyMurph Matt Linton, @0xMatt Ryan Pittman no @ to be had talking about how music and for...
Forensic Lunch 4/28/17
28 Apr 2017
Contributed by Lukas
Paul Shomo comes on to talk about Guidance Software's new Forensic Artifact Research Program where you can get $5,000 USD just for research you are al...
Forensic Lunch 4-7-17
24 Apr 2017
Contributed by Lukas
This week have: Ashley Hernandez from Guidance Software talking about Enfuse Nicole Ibrahim from G-C Partners talking about event tracing logs in W...
Forensic Lunch 3-24-17
06 Apr 2017
Contributed by Lukas
This episode we catch up with Lee on the news and talk about current issues in DFIR.
Forensic Lunch 3/10/17
06 Apr 2017
Contributed by Lukas
This episode we talk vault 7 leaks with Lee Whitfield, what it means for DFIR and other news as well as DFIR database usage discussions and developmen...
Forensic Lunch 2-10-17
16 Feb 2017
Contributed by Lukas
Michael Louis joins us to talk about how lawyers select and vet experts. Also talks about Toastmasters and how they teach good presentation skills and...
Forensic Lunch 2-3-17
16 Feb 2017
Contributed by Lukas
Ryan Benson is here to talk about updates to Hindsight, what he's been up to and his other tool SQUID. David Dym came on to talk about FAT32 remova...
Forensic Lunch 1-27-17
16 Feb 2017
Contributed by Lukas
Lee Whitfield comes on to talk about the Forensic 4Cast awards which are now taking nominations. Jonathan Poling came on to talk about his new blog...
Forensic Lunch 1-20-17
16 Feb 2017
Contributed by Lukas
Friend of the show Eric Zimmerman is back to talk about updates to his tools and research
Forensic Lunch 12-30-16
16 Feb 2017
Contributed by Lukas
Davida and I talk about whats new in our research, tools and packages
Forensic Lunch 11-4-16
16 Feb 2017
Contributed by Lukas
Michael Gough talking with us about his tool LOG-MD and his work. We also go into SRUM again showing new data we can correlate within it.
Forensic Lunch 10-28-16 Hibernation Recon
16 Feb 2017
Contributed by Lukas
This episodes is all about Hibernation files and Mark Spencer's company Arsenal Consulting research into it that led to the creation of a new tool cal...
Forensic Lunch 10-26-16 Live from OSDFCon
16 Feb 2017
Contributed by Lukas
Live broadcast from OSDF Con 2016 Talking about DCITA, Autopsy and the academic program that Mark McKinnon is running at Davenport. Sorry abou...
Forensic Lunch 9 23 16
23 Sep 2016
Contributed by Lukas
The forensic lunch! The twice a month live videocast/podcast all about #DFIR This episode we have: Bradley Schatz of Shatz Forensics and Evimetry, ...
Forensic Lunch 9-2-16
02 Sep 2016
Contributed by Lukas
The Forensic Lunch! The videocast/livecast/podcast all about #DFIR! This week we have Eric Zimmerman talking about the work he did speed and scale te...
Forensic Lunch 8-26-16
02 Sep 2016
Contributed by Lukas
The Forensic Lunch! The twice a month live videocast/podcast all about #DFIR! This broadcast is all about running an isolated virtual network...
Forensic20Lunch208-12-16
16 Aug 2016
Contributed by Lukas
The Forensic Lunch! The twice a month live videocast/podcast all about #DFIR !\ This broadcast: Matt Bromiley, +Matt Bromiley talking about filters...
Forensic Lunch 7/29/16
29 Jul 2016
Contributed by Lukas
It's the Forensic Lunch! The twice a month live videocast/podcast all about DFIR This episode's guests: Phil Hagen Eric Zimmerman Lin...
Forensic Lunch 7/15/16
15 Jul 2016
Contributed by Lukas
It's the Forensic Lunch! The twice monthly videocast/podcast just about #DFIR join us as we talk about whats new and what new things you can do! ...
Forensic Lunch live from Enfuse Day 2
13 Jul 2016
Contributed by Lukas
This episode is live from Enfuse with Jake Williams and Heather Mahalik Paul Shomo of Guidance Software Ashley Hernandez of Guidance Software Jeff ...
Forensic Lunch live from Enfuse Day 1
13 Jul 2016
Contributed by Lukas
Forensic Lunch live from EnFuse with Rob Batzloff talking about Encase 8, and James Wiebe talking about new advancements at CRU
Forensic Lunch 4/29/16 Ladies Edition
29 Apr 2016
Contributed by Lukas
The Forensic Lunch! A special episode hosted by Nicole Ibrahim and featuring in no particular order: Mari Degrazia Cindy Murphy Heather M...
Forensic Lunch 4/8/16 with Jared Atkinson
08 Apr 2016
Contributed by Lukas
The forensic lunch!The one hour, mostly, DFIR videocast/podcastThis weeks guest:Jared Atkinson,@jaredcatkinson, talking about about DFIR in powershell...
Forensic Lunch 3/25/16
28 Mar 2016
Contributed by Lukas
The Forensic Lunch!The one hour, mostly, videocast/podcast all about DFIR.This weeks guests:Maxime Lamothe-Brassard of Refraction Point talking about ...
Forensic Lunch 3/11/16
17 Mar 2016
Contributed by Lukas
It's the forensic lunch! This broadcast James and I go through the results of our testing of different file carving tools: X-Ways Forensics Bul...
Forensic Lunch 2/26/16 with BlackBag Tech
27 Feb 2016
Contributed by Lukas
It's the Forensic Lunch! The one hour, mostly, videocast/podcast all about DFIR! This weeks guests:Austin Colby, Joe Sylve and Vico Marziale from Blac...
Forensic Lunch 1/22/16
22 Jan 2016
Contributed by Lukas
The Forensic Lunch!The 1 hour, usually, videocast/podcast that brings you the latest in new DFIR research, topics and people. This weeks guests:Hal Po...
Forenisc Lunch 1-8-16
08 Jan 2016
Contributed by Lukas
The first new lunch of the new year withSarah Holmes of the Foreman project (Open Source DFIR Matter Management), You can get a copy (and contribute t...
Forensic Lunch 11/20/15 Live from Google!
23 Nov 2015
Contributed by Lukas
Forensic Lunch! This episode we are live from Google in Mountain View, California getting an update on their development projects. Included ...
Forensic Lunch 11/13/15
23 Nov 2015
Contributed by Lukas
Forensic Lunch!This weeks guests:Andrew Case,@attrc, from the Volatility Project talking about Volatility 2.5, new plugins and the winners of this yea...
Forensic Lunch 10/28/15 - Live from OSDFCon
02 Nov 2015
Contributed by Lukas
The Forensic Lunch! In this episode we are broadcasting live from OSDFCon with the following content: 1. A revised set of rules from our popular...
Forensic Lunch 10/9/15 with Dave Hawkins, Chris Pavan and James Habben
15 Oct 2015
Contributed by Lukas
This week on the forensic lunch we have: Dave Hawkins talking about his firms currently unbeaten contest, lampbash.work Chris Pavan, talking about h...
Forensic Lunch 9/25/15 with Mari Degrazia, Lee Whitfield and Suzanne Widdup
15 Oct 2015
Contributed by Lukas
This broadcast we have: Mari Degrazia talking about testing MFT parsers and what goes into them. Lee Whitfield talking about the events of the week ...
Forensic Lunch 5-19-15 Live from CEIC Day 1
14 Sep 2015
Contributed by Lukas
Live from CEIC with Michael Robinson, Ronald Clark and more!
Forensic Lunch 8-21-15
14 Sep 2015
Contributed by Lukas
In this episode:We discuss the Ashley Madison Data Leak and it's implications for DFIRDavid Dym, @dave873, talks about the newest version of Metadiver...
Forensic Lunch 7-8-15 live from SANS DFIR
14 Sep 2015
Contributed by Lukas
In this episode recorded in front of a live audience:Our first game of Forensic PassphraseVitaliy Mokosiy of Atola talking about Atola Insight Forensi...
Forensic Lunch 7-3-15
14 Sep 2015
Contributed by Lukas
Freedom Edition!Join Matt and I and current guests:Eric Zimmerman, talking deleted registry key analysis and new features in Registry Explorer and mor...
Forensic Lunch 6-12-15
14 Sep 2015
Contributed by Lukas
Guests are Matt Bromiley Dimitry from Bocasoft
Forensic Lunch 5-20-15 CEIC Day 2
14 Sep 2015
Contributed by Lukas
Live from CEIC. Ben LeMere from Berla, Jeff the Product Evanglist from Guidance Software, Amber Shroader from Paraben, and more!
Forensic Lunch 4-22-15
14 Sep 2015
Contributed by Lukas
The you should have filed your taxes edition!This week is all about the Forensic 4cast awards. We cover all of the nominees and make our official vote...
Forensic Lunch 4-3-15
14 Sep 2015
Contributed by Lukas
The thank goodness April Fools day is over editionGuests this week:Devon Kerr talking about his work at Mandiant/Fireeye and his research into WMI for...
Forensic Lunch 3-20-15
14 Sep 2015
Contributed by Lukas
We had another great Forensic Lunch! This broadcast we had:James Carder of the Mayo Clinic, @carderjames, talking all about automating your response p...
Forensic Lunch 2-27-15
14 Sep 2015
Contributed by Lukas
Guests this broadcast:Ben LeMere of Berla talking about Vehicle Forensics, Embedded Systems, Cam bus networks and all the fun he's been having with do...
Forensic Lunch 11-28-14
14 Sep 2015
Contributed by Lukas
The after Thanksgiving Hangover edition: This week we had Eric Zimmerman, @ericrzimmerman, talking about Shellbags, his tool Shellbag explorer and ou...
Forensic Lunch 2-21-14
14 Sep 2015
Contributed by Lukas
We had an interesting Forensic Lunch today with:Rob Fuller, @mubix, talking about his new project, project mentor http://www.projectmentor.net/ where ...
Forensic Lunch 12-13-13
14 Sep 2015
Contributed by Lukas
This week with:Yogesh Kahtri talking about his Windows 8 registry forensics research (You can read it here http://www.swiftforensics.com/ and email hi...
Forensic Lunch 12-6-13
14 Sep 2015
Contributed by Lukas
Robert Haist, talking about his research with page_brute in recovering command execution and other fun things from the pagefile, read his blog about i...