Dustin Decker

Think about building a “Go Bag”.

When the phone rings it’s important to have anticipated anything you may need and have it on hand – especially if you’re walking into an airgap. Here are a few I recently obtained that are performing exceptionally well for me.

It’s also a good idea to have more than one, based on functional need. I have three. A red bag, a blue bag, and a green bag.

TP-Link 5 Port Gigabit Switch | Easy Smart Managed | Plug & Play | Desktop/Wall-Mount | Shielded Ports | Support QoS, VLAN, IGMP and Link Aggregation. This little thing is insanely feature-rich at $21.99 on Amazon.

Dualcomm ETAP-2003 10/100/1000Base-T Gigabit Ethernet Network TAP

When you need full, active, inline packet capture at wire speeds up to 1000Mbps, this one is outstanding at $229 on Amazon.
One drawback: It does not fall back to passive if power to the unit is interrupted.

SAMSUNG T7 Shield 2TB, Portable SSD, up to 1050MB/s, USB 3.2 Gen2, Rugged, IP65 Rated, External Solid State. Clocking in at $149.99 on Amazon these are affordable enough to dedicate to a single investigation for evidence capture.


Dustin Decker

Hello World! My name is Dustin Decker, and I am a full-time security researcher and student with over twenty years of experience as an information systems engineer. I am currently beginning my senior year pursuing my second bachelor’s degree in applied Cybersecurity (BACS) with the SANS Technology Institute. I anticipate graduating in May of 2024. I am a skilled Information Security Analyst with expertise in risk management framework (RMF), systems development life cycle (SDLC), security life cycle, management of a wide range of vulnerabilities and threats, fundamental business analysis, and project management. Skills: Microsoft Azure FedRAMP, Puppet, Artifactory, Django, Riverbed Steelscript, Riverbed SteelCentral NetShark, Vagrant, Chocolatey, MuleSoft, PostgreSQL, JavaScript, BASH Scripting, PowerShell, RHEL, DevOps, Docker, Visual Studio, BeEf, Bucket Finder, TLS-Scan, CeWL, JQ, Masscan, Metasploit/Meterpreter, Zenmap, Nmap, Mimikatz, SpiderFoot, Unshadow + John, Volatility, and personal new favorite: SRUM-Dump. I specialize in providing IT security expertise and guidance in support of security assessments and continuous monitoring for government (FISMA & NIST) and commercial clients. I am comfortable in heterogenous environments with tens of thousands of hosts.

, , ,