A monthly wrap-up of the DFIR news for November 2017. Thank you to those Patreon donors for the last month. I will be donating that money to Lifehouse in memory of my late colleague John. If you are a Patreons donor the show notes can be found here Special thanks to my friend Jeff (Animatic on Soundcloud) for letting me […]
FORENSIC ANALYSIS Hideaki Ihara at the Port 139 blog examines the Windows registry file format RegistryとFile format(1) Luis Rocha at ‘Count Upon Security’ looks at a few artefacts that may be useful when investigating an attacker interacting with a Windows machine through the GUI. Digital Forensics – Artifacts of interactive sessions The guys at Cyber […]
Just to start, I’ve signed up to Amazon’s Affiliate program so if you click on the Amazon links I’ll get a referral bonus. That being said, I’m going to be providing the non-referral link, as well, for anyone that wants to use that. Also; apologies for the formatting and if some posts from the week […]
FORENSIC ANALYSIS Hideaki Ihara at the Port 139 blog looks at the effect on a file/folders MFT entry when sdelete is used. Win 10 と sdelete Oleg Skulkin and Igor Mikhaylov at Cyber Forensicator take a look at a few artefacts on OSX that may assist in identifying files copied to a connected volume. They […]
Just wanted to say thanks first up to the Patreon donors for the latest podcast episode. For those that didn’t see last weeks post, I’ll be donating the proceeds from this months show to the Lifehouse cancer research and treatment centre. FORENSIC ANALYSIS Dan Pullega at 4n6k posts how he identified the answer to a […]
This Week In 4n6 