SOFTWARE UPDATES Plaso has been updated to version 1.5, codenamed Gná. This version has back-end performance updates and new and improved plugins, as well as support for YARA rules. It’s important to note that because of the backend updates, this version isn’t compatible with storage files generated by older versions. (As a side note, a […]

Back in Sydney again! Unfortunately, I ran out of time this week (jet lag doesn’t help productivity) so some of the summaries may be a bit sparse (you may be able to tell which ones I did when I had more time, maybe not). SOFTWARE UPDATES Sumuri released Paladin version 7. The update adds support […]

Last week of vacation, this time, I’m writing overlooking Bangkok! Also, less than 2000 words! closest thing I get to a slow news week 🙂 SOFTWARE UPDATES Willi Ballenthin updated his Windows Event Log parser, python-evtx, to version 0.5.0. The update adds py3 support. Check out @williballenthin’s Tweet Microsystemation updated XRY to version 7.1; adding […]

This week’s post comes courtesy of the free WIFI on the train to Amsterdam. Also, a very extravagantly bearded train ticket inspector saw me watching the Forensic Lunch and stopped to tell me that he thought Matthew has a nice beard. SOFTWARE UPDATES Didier Stevens updated his Python script rtfdump to version 0.0.4 to improve dealing with […]