Blueberry Security

Blueberry Security

Home
Podcast
What to Log, Retain, and Monitor Before You Get Breached
Most companies realize too late that their logs were useless—or gone. Here’s what to capture now, so you can respond faster (and smarter) when it…
 • 
Quinnlan Varcoe
What Legal and Insurance Teams Should Expect from a Real DFIR Firm
If you're advising a client after a breach—or reviewing a claim—this is what good incident response looks like, and how Blueberry delivers it.
 • 
Quinnlan Varcoe
How to Choose an Incident Response Firm (Even If You’re Not Technical)
If you’re under pressure to pick the right breach response partner fast, this guide will help you avoid the noise—and get real answers from real…
 • 
Quinnlan Varcoe
DFIR vs MDR: What’s the Difference—and Which One You Actually Need
Managed Detection & Response sounds helpful—until you’re breached. Here’s how DFIR changes the game, and when it’s time to call real investigators.
 • 
Quinnlan Varcoe
Why Most Incident Response Vendors Fail—and What Real DFIR Looks Like
When you’re under attack, most vendors offer dashboards, delays, or dead ends. Here’s how real breach response actually works—and how to spot the…
 • 
Quinnlan Varcoe
What Is DFIR? (Explain Like I’m 12)
Digital forensics and incident response sounds complicated—but it’s just the work of figuring out what happened, stopping it, and making sure it doesn’t…
 • 
Quinnlan Varcoe
How to Tell If You’re Still Compromised After a Security Incident
A field-tested guide from a DFIR expert on how to know if the attacker’s really gone—or just hiding better.
 • 
Quinnlan Varcoe
What to Do After a Phishing Attack Hits One of Your Employees
A step-by-step guide from a DFIR expert who’s investigated real phishing-based intrusions—built for IT teams, MSPs, and business leaders who need to…
 • 
Quinnlan Varcoe
How to Investigate a Suspicious Login or Endpoint Alert (Without Overreacting or Missing the Breach)
What to do when an alert shows up and you don’t know if it’s real—from a DFIR expert who’s investigated hundreds of early-stage incidents.
 • 
Quinnlan Varcoe
What to Do After a Business Email Compromise (BEC)
A clear, expert-led guide for companies dealing with account takeovers, wire fraud attempts, or suspicious inbox activity—from a top DFIR firm trusted…
 • 
Quinnlan Varcoe
How to Respond to a Ransomware Attack (Before It Gets Worse)
A step-by-step guide from Quinnlan Varcoe—one of the leading DFIR experts in cybersecurity—trusted by companies, MSPs, and legal teams when ransomware…
 • 
Quinnlan Varcoe
My Company Got Hacked—What Do I Do? (Real Incident Response From Blueberry Security)
A step-by-step guide for businesses facing a real cyberattack, written by a DFIR expert who leads breach investigations.
 • 
Quinnlan Varcoe
© 2025 Quinnlan Varcoe
Privacy ∙ Terms ∙ Collection notice
Start writingGet the app
Substack is the home for great culture