Jordan Drysdale at Black Hills Information SecurityA Sysmon Event ID Breakdown Brian MaloneyYour AV is Trying to Tell You Something: Log Lines Deagler’s 4n6 BlogAn Android Casting (Device) Story: “cast.db” Kovar & Associates UAV THREATS TO THE OIL AND GAS INDUSTRY PART 1: THE THREAT IS REAL UAV THREATS TO THE OIL AND GAS INDUSTRY […]
Kevin Pagano at Stark 4N6Charging Battery with Turbo DB Magnet Forensics Weekly CTF Magnet Weekly CTF, Week 12 [Final] Solution Walk Through Magnet Weekly CTF Challenge Week 12 Writeup – Last But Not Least Magnet CTF Week 11 – DNS Cache Analysis… sort of Magnet CTF Week 12: Merry Hacksmas Magnet Weekly CTF (Week 12) […]
A monthly wrap-up of the DFIR news for December 2020. Thank you to those Patreon donors for the last month. This project takes a lot of time, so it’s very much appreciated that people see enough value in it to contribute back 🙂 If you are a Patreon donor the show notes will be found here when […]
2020 is finally over! How lucky we are to see the day (no seriously, really grateful, could have been a lot worse). Not that we’re out of the woods yet, but hopefully 2021 is a lot brighter for a lot of people. The year didn’t start off easy in Australia with the fires that caused […]
Last weekly post of the year! I’m still planning an end of year wrap up post, and the podcast though so still a bit more work to do 🙂 Marco Fontani at AmpedHow to Use Amped Authenticate Video PRNU to Check Whether a Video and Some Images Are From the Same Camera Andrea Fortuna at […]
FOR308 is now available OnDemand, read more about it here! Andrea Fortuna at ‘So Long, and Thanks for All the Fish’Mobile forensics: how to identify suspect network traffic Dr. Neal Krawetz at ‘The Hacker Factor Blog’iPhone Pictures Tegan Parsons at First ResponseThe evidence shows that… Vishva Vaghela at Hacking ArticlesComprehensive Guide on Autopsy Tool (Windows) […]
Andrea Fortuna at ‘So Long, and Thanks for All the Fish’OSX Forensics: a brief selection of useful tools Shafik Punja guest post on Arsenal ReconArsenal Image Mounter (AIM) Walkthrough Atropos4n6How to use Partition%4DiagnosticParser Bryan Ambrose at Data DigitallyApple Pattern of Life Lazy Output’er (APOLLO) on Windows Heather Mahalik at CellebriteNavigating The Analyzed Data Modal In […]
Bill Stearns at Active CountermeasuresWhere Do I Put My Zeek Sensor? Andrea Fortuna at ‘So Long, and Thanks for All the Fish’How to extract forensic artifacts from Linux swap Atropos4n6Are you sure you extract all the available Volume Serial Numbers (VSNs) that reside in the Windows 10 Event Log “Microsoft-Windows-Partition%4Diagnostic.evtx”? Blue Team BlogSIEM – Use […]
A monthly wrap-up of the DFIR news for November 2020. Thank you to those Patreon donors for the last month. This project takes a lot of time, so it’s very much appreciated that people see enough value in it to contribute back 🙂 If you are a Patreon donor the show notes can be found here. Special […]
Alexander JägerGarmin .Fit file Forensics Andrea Fortuna at ‘So Long, and Thanks for All the Fish’iOS Forensic: full disk acquisition using checkra1n jailbreak Heather Mahalik at CellebriteKeyword Searching in Cellebrite BlackLight Content Search Cheeky4n6MonkeyiOS14 Maps History BLOB Script Giuseppe Scalzi at Compass SecurityThe “Volatility Triage App” for Splunk Danny Henderson JrSANS Community CTF November — Network Challenge […]
