ATTRIBUTION IS EVERYTHING.

Placing the Suspect Behind the Keyboard Newsletter

Only that which helps you tie the act to the actor.

Dedicated to DFIR casework focusing on attribution

If you can't place a person at a place and time with a device, are you really DFIRing?

PSBK courses and internal comms are by invite only or when a course is made public.