Stories by Brandon Gregg

Privacy, investigations and pop-up banners in a BYOD world

By Brandon Gregg | 08 January, 2013 15:54

Many companies use "pop-up banners" to help remind employees of the rules and policies governing their systems. These banners are also intended to add a degree of legal protection by noting that the employee has limited rights to privacy when using company computers and networks.

Use your own 'Flame' spyware for investigations

By Brandon Gregg | 06 August, 2012 19:32

Logging onto your computer, you are greeted with a screen full of statistics in easy-to-read bar and pie graphs. One graph in particular quickly catches your attention. Out of hundreds of users, one computer is being flagged for sending large amounts of data to a server in Iran.

How online black markets work

By Brandon Gregg | 01 May, 2012 05:27

The internet is no stranger to crime. From counterfeit and stolen products, to illegal drugs, stolen identities and weapons, nearly anything can be purchased online with a few clicks of the mouse. The online black market not only can be accessed by anyone with an Internet connection, but the whole process of ordering illicit goods and services is alarmingly easy and anonymous, with multiple marketplaces to buy or sell anything you want.

5 free ways to use crowdsourcing for investigations

By Brandon Gregg | 28 June, 2011 09:06

We have all heard the phrase, "When all else fails, try, try again." But in an investigation, when your own skills aren't enough, your professional network can't support you, and your leads go cold, what is next? You need to try again, yes, but try a new approach. One new approach is to turn to the 'wisdom of crowds' for answers.

How to build your own digital forensics lab, cheap

By Brandon Gregg | 23 July, 2009 05:18

All too frequently a peer will contact me in a panic about recovering deleted files from a suspect's hard drive--after my peer has trampled on the digital evidence like a rookie police officer at his first crime scene. Often valuable evidence is lost for good,or unusable in court; or worse, the suspect knows he is being investigated.

Tools to identify anonymous users online

By Brandon Gregg | 07 July, 2009 00:23

After posting 5 Free Ways to Track Online Leaks of Information, I received numerous requests asking how to identify the online source leaking the confidential company information. Here are some techniques a corporate investigator can use to identify anonymous users online.

Free Tools to Send Anonymous Messages

By Brandon Gregg | 18 June, 2009 02:07 | 9 Comments

Whether it is for an investigation, a whistle-blower statement, a prank or just extreme paranoia, you may have a need for anonymously sending messages. The following five tools provide an easy to use way to communicate incognito with Internet surfing, emails, phone calls and text messages. While these tools have their limitations, they do provide an Investigator a great way to hide his identity, gather intelligence, and communicate secretly when needed.

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Webroot Web Security

Proactive web security that blocks threats in the cloud before they reach users’ machines, or enter customers’ networks.

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.