In this episode we explore a growing class of threats that leave investigators with no malware, no suspicious files, and sometimes no compromised device to examine. Learn how attackers abuse cloud services, APIs, automation tools, and legitimate administrative features to steal data and evade traditional detection. Discover where the evidence really lives, why logs have become the new crime scene, and how investigators must adapt to uncover attacks that exist only in actions, not artifacts.

#FforForensics, #DigitalForensics, #DFIR, #CloudForensics, #CyberForensics, #CloudSecurity, #IncidentResponse, #FilelessAttacks, #CloudInvestigations, #ForensicPodcast, #CyberSecurity, #ThreatHunting, #IdentitySecurity

What if your organization was breached... and there was no malware to find?

No suspicious files.
No infected endpoint.
No obvious signs of compromise.

Just legitimate cloud tools being used for the wrong reasons.

In Season 2, Episode 3 of F for Forensics, we explore how modern attackers operate without dropping malware, how cloud-based attacks evade traditional defenses, and where investigators must look when the evidence isn't on a hard drive.

Listen now: F is for Fileless in the Cloud: Attacks Without Endpoints

#FforForensics #DigitalForensics #DFIR #CloudForensics #CyberForensics #IncidentResponse #CloudSecurity #ForensicPodcast

In this episode we dive into the modern reality of identity-driven attacks. In today’s cloud-first world, attackers don’t need malware or exploits — they simply log in. Learn how federated identity systems like Microsoft Entra ID, Okta, and Google Workspace change the forensic landscape, why credentials and tokens have become the new attack surface, and how investigators can uncover evidence hidden inside authentication logs, access events, and OAuth permissions. If you want to understand how to investigate cases where login itself is the crime, this episode is essential listening.

#FforForensics #DigitalForensics #DFIR #CloudForensics #IdentitySecurity #FederatedIdentity #CyberForensics #IncidentResponse #CyberSecurity #AuthenticationLogs #MFA #TokenAbuse #ForensicPodcast