Project Obsidian: Mise En Place for Incident Investigations

Project Obsidian explains forensic preparation and tooling organization to accelerate digital forensics and incident triage workflows.

Summary

This DEF CON talk covers project obsidian: mise en place for incident investigations.

Matt Scheurer

Matt Scheurer shares battle-tested incident response methodologies, telemetry sources, and fast containment strategies for enterprise defenders.

incident-responsetelemetrytriage+2

Catherine Ullman

Walks through a real-world investigative narrative to show how digital artifacts in system registries fit into broader forensic investigations.

forensicsinvestigationblue-team+2

Anthony Kava

Goes behind the scenes of a high-profile homicide investigation to show how command-line utilities and digital evidence unmasked an online stalker.

forensicsinvestigationlinux+2