DFDR & Red Canary – “After detection: teaming up to shut down a web server attack”

When an adversary used encoded PowerShell to attack a web server belonging to a DFDR Consulting client, Red Canary’s detection engineering team spotted a few things that looked awry. But the story didn’t end there. A DFDR digital forensics consultant and a Red Canary detection engineer share their sides of the joint investigation.

Read the full article:

https://redcanary.com/blog/dfdr-consulting/