Week 22 – 2021

Voting for the annual Forensic 4cast Awards has opened! Thank you Lee for your tireless efforts yet again. Congratulations to everyone that was nominated for an award, and thank you everyone for nominating this website as one of the “Resource of the Year” finalists, against very worthy competition. Of course, I’d be happy to take […]

Week 21 – 2021

Andrea Fortuna at ‘So Long, and Thanks for All the Fish’iLEAPP: an iOS logs, events, and plists parser Angry-Bender’s blog houseNegative Decimal DWORD to Human Format BelkasoftBelkasoft CTF May 2021: Write-up Elcomsoft A Tale of One iPhone Backup Password The File System Dirty Bit Guide: Forensically Sound Extraction of iPhone 5s, 6, 6s and SE […]

Week 20 – 2021

Andrea Fortuna at ‘So Long, and Thanks for All the Fish’iOS Forensics: how to perform a logical acquisition with libimobiledevice Ashley PearsonVolatility 3 Cheatsheet Doug Metz at Baker Street ForensicsCollecting from Microsoft Teams using PowerShell Jess Garcia at DS4N6[BLOG]  DS4N6 – The Road So Far – Part II, by  Jess Garcia Forensafe Windows Wireless Networks […]

Week 19 – 2021

Angry-Bender’s blog houseDFIR Playbook – Windows Forensics(WIP APR21) John Walther at Carpe IndiciumCleaner Office365 logs with Excel and Magnet Custom Artifact Generator Heather Mahalik at CellebriteUFED Fundamentals Matter – You Asked, We Answered Dexter Morgan at Data ForensicsHow to Find Who Deleted Records in SQL Server? Perfect Workarounds Dr. Neal Krawetz at ‘The Hacker Factor […]

This Month In 4n6 – April – 2021

A monthly wrap-up of the DFIR news for April 2021. Special thanks to guest host Chapin Bryce, who offered to share his thoughts this month since I wasn’t able to put the podcast together. Thank you to those Patreon donors for the last month. This project takes a lot of time, so it’s very much appreciated that […]

Week 18 – 2021

Alexis BrignoniIdentifying the Android Operating System Version thru UsageStats Didier StevensQuickpost: Decrypting Cobalt Strike Traffic Forensafe Investigating Windows Services Investigating Internet Explorer Web Browser Kyle SongBlog #28: IPv6 in TeamViewer(v15) part 2. [EN] Jamie McQuaid at Magnet ForensicsVirtualizing Your Forensics Lab in the Cloud Part 5: Securing Your Evidence in Microsoft Azure Meisam Eslahi at […]