After years of experience, trial & error and research, I finally put together my framework for analysts (IR , SOC, IT, if you investigated technical data this is for you). 🐙 ADAPT (Approach, Discovery, Association, Profile, Timeline) chocolatecoat4n6.com/2026/01/23/p... #DFIR #Cybersecurity

Terryn Valikodath never imagined that a childhood jailbreaking iPhones and exploring criminal forensics would land him in incident response. Hear him recount the journey in our latest episode: cs.co/63324Cxnam

Put your cyber skills to the test with Talos’ 12 Days of Malware, featuring insights from Talos-driven research published throughout the year. Try to guess the threat actor or tool in as few clues as possible, and share how you did in the comments below: blog.talosintelligence.com/salt-typhoon...

Over the last year I've been sharing a framework and mindset for how to perform an investigation as an analyst during Incident Response. I hope this serves as a great introduction to ADAPT, more to come! chocolatecoat4n6.com/2025/11/30/l... #DFIR #InfoSec #incidentresponse

Over the last year I've been sharing a framework and mindset for how to perform an investigation as an analyst during Incident Response. I hope this serves as a great introduction to ADAPT, more to come! chocolatecoat4n6.com/2025/11/30/l... #DFIR #InfoSec #incidentresponse

Think you know Cisco Talos Incident Response? Join us over the next few weeks to bust some common myths about our services. First up...

Appreciate folks tuning in or attending my talk for Wild West Hackin' Fest, if you are interested in the slides I have them here below github.com/chocolatecoa...

Cannot wait to present at this con, hoping to meet up with a few of y’all

When a cybersecurity crisis strikes, Cisco Talos Incident Response transforms chaos into control. Read our latest blog for a behind-the-scenes look at what happens when you engage our team: cs.co/63324AZeIQ

After wayyyy too long. I've updated my DF/IR templates for documentation. I've added fictional examples within the docs so you can see a good reference and how it's intended. github.com/chocolatecoa...

Would love for anyone interested to join us and hear about what we’re doing out here!

Hope you all can make my talk at @blueteamcon.com! Super excited to be able to talk all about investigation!

Finally got around to writing another post, appreciate all the views!

Why Learning Through Books is Key in Cybersecurity 📚 Types of Books ☯️ The Tao of Books 🏫 Other Sources of Information chocolatecoat4n6.com/2025/04/09/w... #DFIR #CyberSecurity #books #infosec

Cisco Talos’ 2024 Year in Review is available now! With visibility into more than 886 billion security events per day, the report features our key insights. Read the full report here: http://cs.co/63320FzuMG

By making minor changes to command-line arguments, it is possible to bypass EDR/AV detections. My research, comprising ~70 Windows executables, found that all of them were vulnerable to this, to varying degrees. Here’s what I found and why it matters 👉 wietze.github.io/blog/bypassi...

From threat hunting, detection building, vulnerability discoveries and incident response, Cisco Talos shows up every day to try and make the internet a safer place. Watch our full overview here: http://cs.co/633280m3rs

Pro tip: set your logs to be all UTC. This will save your forensic analyst (who bills by the hour) the trouble of having to convert timestamps (and even figuring out which timestamps are in which TZ). It also keeps them ordered correctly when forwarded to a SIEM, especially from multiple TZ's.

Check out all the great work our team puts together from real life investigations

No, I don't need a bloody copilot for this document, thank you. Writing is, in no small part, a tool for thinking. If you outsource that element to a machine that cannot think, you shouldn't be surprised if, at the end of the process, neither you nor your reader are any the wiser.

DF/IR tools: amazing at everything, except making decisions, solving cases, and doing your job for you. brettshavers.com/brett-s-blog... #DFIR

tip from an incident responder: take care of your mental and have a meditative habit. You can be at peace while chaos reigns. I love yoga, I know some who enjoy painting, lock picking, metalcrafting, create something, do something. love the world around you by loving yourself.

Reminder for the new year and setting goals. Underpromise, overdeliver

For anyone who’s curious about my latest talk at #misecCon youtu.be/rg-mRLEoaII?...

I have a blog. Did I make a new post, nope. Just making a mention that I have a blog 🫡 chocolatecoat4n6.com

looking for people in tech on Bluesky from Grand Rapids and West Michigan.

PISTONS FANS PUT IT IN THE RAFTERSSS

Corythoraptor. I posted a WIP of this ludicrous animal a couple of days ago. I’m calling it finished for now. #SciArt

If you need datasets for your #DFIR training? Feel free to use any of my cases found in the URL below. They can be used for both academic or commercial training. www.ashemery.com/dfir.html

Another reminder for the Michigan and anyone wanting to make the trip for this event! 👾💻🧤

I'm liking how simple it is to be "verified" with your own domain on here

Pistons are showing up this year, the level of hope is rising

If you’re in the area, id love to catch you at misecCON! Excited to be presenting and have met a ton of great people last year. Extremely entry level friendly imo for #DFIR and #cybersecurity folks. miseccon.misec.us/schedule/

The Power of Storytelling in IT and Cybersecurity 📖Stories that improved my work 🌱Power and growth 🗣️My unsolicited advice chocolatecoat4n6.com/2024/09/16/t... #DFIR #infosec #IT #cybersecurity

If you want to hear me ramble about the #Apple app store and the EU changes, please take a listen 🎤📱 talostakes.talosintelligence.com/2018149/1491... #dfir #infosec #cybersecurity

Chaos to Clarity: Why Triage is not Optional 🩻 Surgery without Pre-Op 🔎 Contain and Identify 🤺 Mastering the Art chocolatecoat4n6.com/2024/03/07/c... #dfir #infosec #cybersecurity #forensics #digitalforensics #cyber

Where does macOS fit into DFIR? 🪟 Isn't Windows DFIR enough? 🦶🏽 The Achilles Mainframe 🔎 Getting evidence from macOS sucks! 🔦 Light at the end of the tunnel #dfir #cybersecurity #macos #infosec chocolatecoat4n6.com/2023/11/16/w...