---
title: Recon InfoSec | DFIR
description: DFIR |
---

[Skip to content](https://blog.reconinfosec.com/tag/dfir#main-content)

[![recon_infosec.png](https://blog.reconinfosec.com/hs-fs/hubfs/recon-logo-full-on-white.png?width=7680&height=2304&name=recon-logo-full-on-white.png "recon_infosec.png")](http://reconinfosec.com)

- [Website Home](https://www.reconinfosec.com/)

- [Website Home](https://www.reconinfosec.com/)

## [Every Organization Needs Centralized Logging](https://blog.reconinfosec.com/every-organization-needs-centralized-logging)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/EricCapuano.png) 

[Eric Capuano](https://blog.reconinfosec.com/author/eric-capuano)

Logs are on the systems, why do I need this? Because Digital Forensics & Incident Response is...

## [Scaling Enterprise Forensic Timelining](https://blog.reconinfosec.com/scaling-enterprise-forensic-timelining)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/EricCapuano.png) 

[Eric Capuano](https://blog.reconinfosec.com/author/eric-capuano)

In July, Eric & Whitney gave a talk titled "Breaches Be Crazy" at the SANS DFIR Summit outlining...

## [OPENSOC @ DEF CON 29](https://blog.reconinfosec.com/opensoc-def-con-29)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/KelleyWilds.png) 

[Kelley Wilds](https://blog.reconinfosec.com/author/kelley-wilds)

It’s that time of year again - DEF CON! We were thrilled to run OpenSOC again at DEF CON this year,...

## [An Encounter With TA551/Shathak](https://blog.reconinfosec.com/an-encounter-with-ta551-shathak)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/AndrewCook.png) 

[Andrew Cook](https://blog.reconinfosec.com/author/andrew-cook)

The Recon incident response team recently responded to a case of business email compromise. The...

## [Endpoint Logging For The Win!](https://blog.reconinfosec.com/endpoint-logging-for-the-win)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/Samuel-Cartoon_crop.jpg) 

[Samuel Kimmons](https://blog.reconinfosec.com/author/samuel-kimmons)

Whether you're on the Defensive or Offensive side of security, it's important to understand how...

## [Recon Launches SOC X](https://blog.reconinfosec.com/recon-launches-soc-x)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/KelleyWilds.png) 

[Kelley Wilds](https://blog.reconinfosec.com/author/kelley-wilds)

The Recon team is excited to announce the launch of SOC X™, the Professional SOC Team World...

## [Recon Launches Network Defense Range (NDR) Live Online](https://blog.reconinfosec.com/recon-launches-network-defense-range-ndr-live-online)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/KelleyWilds.png) 

[Kelley Wilds](https://blog.reconinfosec.com/author/kelley-wilds)

The Recon team is thrilled to announce our newest offering, NDR Live Online!

## [Securing Your Velociraptor Deployment](https://blog.reconinfosec.com/securing-your-velociraptor-deployment)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/WhitneyChampion.png) 

[Whitney Champion](https://blog.reconinfosec.com/author/whitney-champion)

Our team are huge fans of Velociraptor. It's an incredibly powerful tool, for both DFIR and...

## [Integrating Thinkst Canaries with TheHive](https://blog.reconinfosec.com/integrating-thinkst-canaries-with-thehive)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/WhitneyChampion.png) 

[Whitney Champion](https://blog.reconinfosec.com/author/whitney-champion)

We've been big fans of the Thinkst platform for a while now. We may have mentioned them a time or...

## [Recon Provides Range Training for Military Cyber Protection Teams During COVID-19 Lockdown](https://blog.reconinfosec.com/recon-ndr-for-military-cyber-protection-teams)

![{{ picture_of_text }} {{ content.blog_author.display_name }}](https://blog.reconinfosec.com/hubfs/Imported%20images/EricCapuano.png) 

[Eric Capuano](https://blog.reconinfosec.com/author/eric-capuano)

Recently, our team was asked to provide training for an operational military Cyber Protection Team...

[1](https://blog.reconinfosec.com) [2](https://blog.reconinfosec.com/tag/dfir/page/2) <https://blog.reconinfosec.com/tag/dfir/page/2>

© 2026 All rights reserved. [RSS Feed](https://blog.reconinfosec.com/rss.xml)