Best DFIR Podcasts (2025)

1
Hands-On Defense: Markus Schober on DFIR, Labs, and Building Better Blue Teamers 30:31

Play Pause

26d ago30:31

30:31

In this episode of Simply Defensive, Josh Mason and Wade Wells sit down with Markus Schober, founder of Blue Cape Security, to talk all things digital forensics, incident response (DFIR), and why hands-on training beats theory every time. We dig into: 🔹 The hidden value of building your own cyber range 🔹 How IR pros train using real attacks (and wh…

1
Brett Shavers Blogging Extravaganza! 1:14:24

1d ago1:14:24

1:14:24

Send us a text This episode digs into the habits that actually hold up: learning from CTF wins and post-event reviews, exploring scholarships and Reno trainings that build technical muscle, and walking through expert-witness prep that turns courtroom stress into structured, confident testimony. We’ll unpack Brett Shavers’ reminder that truth alone …

1
CAPTCHA Con: Hackers' Evolving ClickFix Malware Trap 7:50

3d ago7:50

7:50

Got a question or comment? Message us here! “I’m not a robot.” 🤖 Hackers are exploiting fake “I’m not a robot” CAPTCHA pages to deliver malware. Host Andrew Hickman breaks down how this ClickFix attack uses social engineering to steal data and evade detection. Tune in to learn key defense tactics and how to keep your team protected. Support the sho…

1
Patch Tuesday Panic, Qilin’s Hybrid Strike & the F5 Fallout - Brutally Honest Security #3 36:02

4d ago36:02

36:02

Eric Taylor slices through the week’s noise in Brutally Honest Security — no spin, only sharp, actionable insight. This episode covers the crucial headlines every security pro should know: 🔧 Microsoft’s October Patch Tuesday: a record-scale release — 172 vulnerabilities patched, including multiple zero-days — and why patch prioritization matters no…

1
RondoDox Botnet Expansion: The Shotgun Approach to IoT Exploitation 7:19

10d ago7:19

7:19

Got a question or comment? Message us here! This week on the #SOCBrief, Andrew breaks down RondoDox, a rapidly growing botnet campaign taking aim at routers, DVRs, and IoT devices worldwide. With over 50 vulnerabilities across 30+ vendors, this “shotgun” exploitation strategy is fueling massive DDoS and crypto-mining attacks. Support the show Watch…

1
Inside F3: Building Community And Sharing Knowledge In Digital Forensics 1:00:33

12d ago1:00:33

1:00:33

Gareth Davies, Chairman of F3 (First Forensic Forum), joins the Forensic Focus Podcast to explore how a grassroots, vendor-neutral community has helped shape digital forensics in the UK for three decades. He traces F3's origins in the 1990s, when affordable training and tool-agnostic knowledge-sharing were scarce, and explains why the forum still f…

1
From Help Desk to SOC: How KevTech Broke Into Cybersecurity Without Certs 29:40

12d ago29:40

29:40

What happens when you go from fixing executives’ laptops at Goldman Sachs to defending against cyber threats in a SOC? In this episode of Simply Defensive, hosts Josh Mason and Wade Wells sit down with Kevin Apolinario — better known as KevTech — to unpack his journey from IT support to cybersecurity analyst, all without a single certification. Kev…

1
Obscura Ransomware: Unmasking a Stealthy New Threat ⚠️ 12:25

17d ago12:25

12:25

Got a question or comment? Message us here! In this week’s #SOCBrief, Hickman and Peters break down Obscura ... a new ransomware variant making waves with aggressive evasion tactics, process terminations, and domain controller targeting. We cover what’s known so far, the risks it poses to businesses, and the key defenses every SOC should prioritize…

1
Forensic Fix Episode 23 52:46

17d ago52:46

52:46

In this episode, Adam Firman interviews Sonja Ryan, founder of the Carly Ryan Foundation, who shares her personal journey following the tragic loss of her daughter Carly to an online predator. Sonja discusses the foundation's mission to promote online safety for children, the introduction of Carly's Law in Australia, and the importance of education…

1
Detection Engineering Tutorial: Cloud Security, Kubernetes Logging & SOC Career Path 34:44

19d ago34:44

34:44

In this episode of Simply Defensive, we sit down with JB, a Senior Cybersecurity Engineer working in detection engineering. JB shares his journey from SOC analyst to detection engineer, diving deep into the challenges of cloud-native security, Kubernetes logging, and building a sustainable career in cybersecurity. What We Cover: What detection engi…

1
🛡️ Pen Test Potential: How Organizations Are Missing Out on Fortifying the SOC 🛡️ 20:08

24d ago20:08

20:08

Got a question or comment? Message us here! What’s the real difference between a penetration test and a red team engagement, and how can each benefit your SOC? In this episode, Andrew is joined by Tanner, to unpack how pentests uncover vulnerabilities, how red teams stress-test defenders, and why every organization should be leveraging these exerci…

1
2025 SECCON Debrief 25:33

25d ago25:33

25:33

By Alias Cybersecurity

1
Blogs, blogs & blogs! 1:14:49

30d ago1:14:49

1:14:49

Send us a text A baby camel, a high-speed chase, and a heartfelt tribute set the stage for a season opener that is equal parts human and hard-nosed. We pause to honor Mark Baker, mentor, officer, and friend. This episode spotlights a free Belkasoft AI course along with the much-anticipated release of Rabbit Hole v3, designed to tackle complex data …

1
Full Metal Packet: The Missing Conversations in Cybersecurity 0:42

1M ago0:42

0:42

When a breach hits, the first 72 hours decide everything. But the stories, decisions, and philosophies behind those critical hours rarely make it into public conversation. That’s what Full Metal Packet is here to change. Hosted by Yegor and Alex - the founders of Control D (and before that, Windscribe, now trusted by 90M+ people) - this podcast is …

1
🚨 Ransomware Rising: Variants, Tactics, and Defenses in 2025 🚨 7:29

1M ago7:29

7:29

Got a question or comment? Message us here! Ransomware is evolving faster than ever, from double extortion tactics to lightning-fast attack chains. In this episode, we break down how these threats work, why every organization is a target, and the layered defenses SOCs can use to detect and stop attacks early. Support the show Watch full episodes at…

1
Inside The Fight Against Child Exploitation – Leadership And Wellness Lessons From Debbie Garner 42:30

1M ago42:30

42:30

Debbie Garner, retired Special Agent in Charge at the Georgia Bureau of Investigation, joins the Forensic Focus Podcast to share insights from her 30-year career. From undercover narcotics work in her early 20s to leading Georgia's Internet Crimes Against Children (ICAC) Task Force, Debbie brings a unique perspective on collaboration, child protect…

1
CSRMC, LockBit 5.0 & Phishing Fallout - Brutally Honest Security #2 2:33:09

1M ago2:33:09

2:33:09

In this episode of Brutally Honest Security, Eric Taylor tears into the week’s most critical and pulse-raising cybersecurity developments — no fluff, just facts and blunt insight. Episode Headlines & Links: 👉 How the newly rebranded Department of War is replacing legacy frameworks with its Cybersecurity Risk Management Construct (CSRMC) - shifting …

1
💢 FileFix Fiasco 💢 Steganography's Stealthy StealC Drop 5:53

1M ago5:53

5:53

Got a question or comment? Message us here! In this episode of The #SOCBrief, we break down the rising FileFix attack, a new social engineering technique using steganography to deliver info-stealing malware. Learn how attackers disguise malicious PowerShell commands, the risks this poses for browsers, messengers, and crypto wallets, and the proacti…

1
AsyncRAT, FileFix & Airport Shutdowns - Brutally Honest Security #1 2:25:01

1M ago2:25:01

2:25:01

When it comes to cybersecurity, sugarcoating is not an option. Brutally Honest Security cuts through the noise with raw, unfiltered insights from Eric Taylor — a seasoned digital forensics and incident response (DFIR) expert known for his “no-holds-barred” style. Each episode dives straight into the heart of information security: 🔥 Ransomware updat…

1
Monitoring the Dark Web for Leaked Data in DFIR 6:28

2M ago6:28

6:28

Got a question or comment? Message us here! 🔎 This episode of The #SOCBrief dives into the world of dark web monitoring in digital forensics and incident response. Learn why leaked credentials are a top threat, how to safely detect exposures, and what steps SOC teams can take to stay proactive. Support the show Watch full episodes at youtube.com/@a…

1
Episode 24: Voice AI Under Attack: Hackers Exploit AI Call Agents | Traffic Light Protocol Podcast 55:27

2M ago55:27

55:27

Send us a text Voice AI is moving fast — but so are the attackers. In this episode of the Traffic Light Protocol Podcast, Clint and Myles break down how scammers are exploiting Voice AI platforms with the same tricks that wrecked email and telecom decades ago: Premium-rate fraud dressed up in AI clothing Bot-driven spam that floods calendars and bu…

1
Cyber Threat Intelligence for Blue Teams with Jordan Kalm (Morado COO) 32:50

2M ago32:50

32:50

From Army recon missions to building Morado, COO Jordan Kalm reveals how military intelligence tactics translate into modern cyber threat intelligence. In this Simply Defensive episode, Josh Mason and Wade Wells dive into what really works for blue teams and SOC analysts — and what’s just noise. 👉 If you’ve ever wondered how to turn raw intel into …

1
Mastering Incident Response: Essential for SOC Success 8:41

2M ago8:41

8:41

Got a question or comment? Message us here! 💡 This week on The SOC Brief, we’re breaking down incident response (IR) ... why it’s essential, how to build a strong plan, and what SOC teams can do to turn chaos into control. From preparation and containment to recovery and lessons learned, learn how a solid IR strategy saves time, money, and reputati…

1
How a Detective Became the Ginger Hacker: SOC Life, Job Hunts & Blue Team Wisdom 36:02

2M ago36:02

36:02

From the streets to the SOC. 💻 In this episode of Simply Defensive, Josh Mason and Wade Wells talk with Andrew Crotty — aka Ginger Hacker. A former detective turned Tier 3 SOC analyst and Army reservist, Andrew shares his journey into cyber, the struggles of breaking in, and the lessons he’s learned (including the rookie mistake that accidentally d…

1
Episode 23:AI Voice Agent Security: Voice AI Under Siege: SIP Spoofing, Cost Drain, and How to Fight Back 34:25

2M ago34:25

34:25

Send us a text In this episode of Traffic Light Protocol, we kick off our AI series with a hard look at how voice AI agents are being targeted; and how fast small businesses and startups can rack up serious bills overnight. Guest Myles Agnew returns to unpack how old-school telecom tricks are being repurposed in the age of SIP/VoIP and AI: caller I…

1
Automating the Blue Team | Kevin Mata (Swimlane) on SOAR & AI in Cybersecurity 32:43

2M ago32:43

32:43

Automation is changing the way defenders work. In this episode of Simply Defensive, we sit down with Kevin Mata, Director of Cloud Operations at Swimlane, to talk about his journey from flipping burgers at In-N-Out to flipping SOC alerts with automation, SOAR, and AI. Kevin shares how he got started in cybersecurity, how Swimlane helps Blue Teams s…

1
DFN: 2nd Anniversary 1:04:20

2M ago1:04:20

1:04:20

Send us a text We celebrate our two-year podcast anniversary and discuss the importance of thorough case preparation for CSAM cases, courtroom experience, and extracting evidence from iOS devices. • SANS Difference Maker Awards open for nominations through September 15th across multiple categories • AI debate webinar with Magnet Forensics scheduled…

1
DEF CON 33 Debrief 48:45

2M ago48:45

48:45

Got a question or comment? Message us here! Fresh off the chaos of DEF CON 33, Tanner, Hickman, and Will break down the four-day hacker conference, from the eye-opening hacker villages and mind-bending talks to Hickman’s clutch CTF victory and Will’s bold dive into the Social Engineering Community’s Vishing Competition. No sleep, all signal. Suppor…

1
Inside Hack Defender Academy: Gamified Malware Training for Blue Teamers 29:27

2M ago29:27

29:27

Ready to level up your defensive cybersecurity skills? In this episode of Simply Defensive, Josh Mason and Wade Wells sit down with Dan Regalado and Belem — the founders of Hack Defender Academy — to explore how they’re using CTF-style challenges, real malware cases, and gamification to prepare the next generation of defenders. 💡 We cover: Why gami…

1
⚠️ Crypto24 ⚠️ Ransomware: Bypassing EDR and Bolstering Defenses 8:22

2M ago8:22

8:22

Got a question or comment? Message us here! In this episode, we break down the emerging Crypto24 ransomware attacks that use living-off-the-land techniques to bypass EDR. We’ll explore how these attacks unfold and the defensive strategies SOCs and organizations can use, like layered security, enhanced monitoring, and rapid response, to stay ahead o…

1
Rob Allen (ThreatLocker) on Zero Trust, Proactive Security, and Ransomware Prevention 25:27

3M ago25:27

25:27

In Season 4, Episode 4 of Simply Defensive, hosts Josh Mason and Wade Wells sit down with Rob Allen, Chief Product Officer at ThreatLocker, to dive deep into the world of Zero Trust security, proactive cybersecurity strategies, and ransomware prevention. Rob shares expert insights on: Proactive vs. Reactive cybersecurity — why a balanced security s…

1
🚨 Gone Vishing: The Recent Surge of Vishing Attacks 10:50

3M ago10:50

10:50

Got a question or comment? Message us here! This week, we’re unpacking the phishing wave hitting SaaS platforms ... from social engineering to OAuth abuse and AI voice spoofing. Learn why people remain the #1 attack vector and how to stay one step ahead. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcas…

1
Well-Being In Digital Forensics And Policing: Insights From Hannah Bailey 48:03

3M ago48:03

48:03

Hannah Bailey, founder of Blue Light Wellbeing, joins the Forensic Focus Podcast to share her powerful journey from frontline policing to becoming a psychotherapist, trauma therapist, and well-being coach. Drawing on 15 years in the police — including CID and major crime — Hannah brings unique cultural credibility to her work supporting digital for…

1
🚨 SonicWall Firewall Ransomware Breakdown 9:19

3M ago9:19

9:19

Got a question or comment? Message us here! On this episode of the #SOCBrief, we break down attacks on SonicWall firewalls. A wave of ransomware, possibly exploiting zero-day vulnerabilities, is compromising even fully patched systems. Learn how SOCs can respond fast and stay ahead. Support the show Watch full episodes at youtube.com/@aliascybersec…

1
Why Your CISO Needs a “Shut Up, Boss” Button 34:09

3M ago34:09

34:09

What if GitHub sucks for security detections—and AI is finally good enough to replace it? Join Josh Mason and Wade Wells as they sit down with Aaron Mog, the outspoken founder of Detections.ai, to unpack why detection engineering is broken—and how his new platform signed up 4,000+ users in just two weeks. Aaron doesn’t hold back. From ranting about…

1
From Cryptic Apps to Clickable Maps: Making Sense of Digital Evidence 1:16:20

3M ago1:16:20

1:16:20

Send us a text We're back! After a short break we are back to discuss the growing crossover between real-world events and digital evidence in court cases, highlighting how device data can make or break timelines in high-stakes investigations. This episode covers: Ian Whiffin’s latest forensic work, including iOS power log timestamps, Apple Health d…

1
Spilling the Tea: What Happens When Apps Launch Without Locking Down Security ☕ 13:23

3M ago13:23

13:23

Got a question or comment? Message us here! This week’s SOC Brief unpacks how a misconfigured cloud bucket exposed 72,000+ user images from the Tea app, complete with geolocation metadata and real IDs. From national security risks to doxxing fallout, we break down what went wrong and what your security team must do to avoid the same mistakes. Suppo…

1
Why Jack in the Box Might Have the Best Security Team in Fast Food 29:58

3M ago29:58

29:58

How does a Navy fire control tech who once wrangled a six-barrel death robot become the head of security operations at Jack in the Box? In this episode of Simply Defensive, we sit down with Chris Julio — SOC Manager, veteran, and self-proclaimed lover of both metrics and munchie meals. Chris shares his journey from Windows NT and dot-matrix printer…

1
🚨⚠️ A Critical ZERO-DAY (CVE-2025-53770) 17:54

3M ago17:54

17:54

Got a question or comment? Message us here! A critical zero-day (CVE-2025-53770) is actively targeting on-premises SharePoint servers AND it’s already been used to compromise over 100 organizations. In this #SOCBrief, Andrew and Tanner break down how the exploit works and what steps your team should take now. If your SharePoint instance is public-f…

1
Digital Forensics And Stress: Understanding Your Body's Signals 41:45

3M ago41:45

41:45

Dr Zoe Billings and Mark Pannone from Adapt & Evolve join Paul to discuss their unique approach to mental health and well-being in digital forensics. Dr Billings is a biologist and former senior investigator, while Mark is a former Assistant Chief Constable. Together they've developed a model that focuses on recognising the early biological signs o…

1
Forensic Fix Episode 22 44:44

3M ago44:44

44:44

Takeaways Mental health support is crucial for law enforcement professionals. Proactive approaches can prevent severe mental health issues. Stigmas around mental health often prevent individuals from seeking help. Therapy has evolved and can be more solution-focused today. You don't need a diagnosis to seek therapy. Recognizing signs of burnout is …

1
🚪 Offboarding isn't just HR's job … 15:47

3M ago15:47

15:47

Got a question or comment? Message us here! In this week’s #SOCBrief, we break down why offboarding policies are ABSOLUTELY critical for security teams. Overlooked items from abandoned accounts to old VPN access can leave backdoors wide open. Learn how SOCs monitor, contain, and shut down lingering access, and why communication between HR, IT, and …

1
Aligned by Design: CISO x Legal in Practice - Episode 92 54:40

3M ago54:40

54:40

Got a question or comment? Message us here! 🎙️ NEW! Aligned by Design: CISO x Legal Introducing! A fresh new series that explores the intersection of cybersecurity and legal strategy. Join Alias CISO Jonathan Kimmitt and privacy attorney Tom Vincent as they unpack what happens when technology, compliance, risk, and law collide. From real-world expe…

1
Coffee Is Your Top Supply Chain Risk: A Conversation with Kyle Kelly 28:56

3M ago28:56

28:56

SOC analysts, detection engineers, and pentesters—you’re not imagining it: software supply chain security is a dumpster fire 🔥. In this episode of Simply Defensive, we sit down with Kyle Kelly, engineering manager at GitHub and author of Crime Hacks, to unpack the chaos. We cover: - Why malicious packages are sneaking past defenders - The truth abo…

1
🚨 Record-Shattering DDoS Attack Alert 🚨 11:41

4M ago11:41

11:41

Got a question or comment? Message us here! Hackers just unleashed the largest DDoS attack in history, peaking at 7.3 Tbps and 4.8 billion packets per second. In just 45 seconds, it pummeled its target with the data equivalent of over 9,000 HD movies, a powerful reminder of how far attack capabilities have evolved. 🎧 Tune in to today’s SOC Brief fo…

1
Secure AF SOC Brief #5 - Chrome CVE-2025-6554 9:04

4M ago9:04

9:04

Got a question or comment? Message us here! In this episode of The SOC Brief, the team unpacks a critical zero-day vulnerability in Google Chrome (CVE-2025-6554) that’s being actively exploited. Learn how attackers use type confusion bugs to hijack browser memory, what makes this exploit so dangerous, and why it’s targeting high-value organizations…

1
Ep 91: The Engineers React to Breach News 45:27

4M ago45:27

45:27

Got a question or comment? Message us here! In this episode, our security engineers break down the latest cybersecurity headlines, from the real scoop behind the “16 billion password” leak to the rise of hacker groups like Scattered Spider. 🕷️ We discuss how attackers bypass MFA, why exploited data keeps resurfacing, and what organizations can do t…

1
Secure AF SOC Brief #4 - False Positives 12:25

4M ago12:25

12:25

Got a question or comment? Message us here! In this episode of The SOC Brief, Andrew and Dax dive into the world of false positives – those misleading alerts that flood security teams with noise. They discuss how misconfigurations, lack of context, and overly sensitive rules can lead to alert fatigue. With practical tips on investigation, tuning to…

1
Techno, Timeline, and Training Truths 1:06:03

4M ago1:06:03

1:06:03

Send us a text We kick off this episode with highlights from the Techno Security Conference, our 80s-themed outfits, packed LEAPP labs, AI panel discussions, and great conversations with friends and colleagues across the field. We discuss Brett Shavers’ recent series on DFIR entry-level work, and share our thoughts on the need for better forensic t…

1
Well-Being Interventions For Forensic Practitioners – Have Your Say 39:04

4M ago39:04

39:04

Dr Jo Morrissey joins Paul to discuss her research into wellbeing challenges faced by forensic practitioners worldwide. As Workforce Strategy Lead at the Forensic Capability Network, Dr Morrissey is conducting a comprehensive study examining mental health impacts across all forensic disciplines - from digital forensics to crime scene investigation,…