Week 44 – 2021

Sol Kavanagh at AWS SecurityForensic investigation environment strategies in the AWS Cloud BelkasoftAndroid Viber Forensics with Belkasoft X Digital Forensics Myanmar Covid Positive Day-1 Day-2 Day-3 Day-4 Day-6 Day-5 Day-7 Day-8 Day-9 Day-10 Day-11 Day-12 Day-13 Day-15 Day-16  (Trusted Platform Module) (TPM) Day-14 Day-18 Day-17 eLearnSecurity Certified Digital Forensics Professional (Ecdfp)  (Introduction To Digital Forensics ) […]

Week 43 – 2021

Andrea Fortuna at ‘So Long, and Thanks for All the Fish’If you’re a fan of Volatility, you’ll love CrowdStrike’s SuperMem Atomic MatryoshkaAutoRun Malware: Why your computer is summoning dark lords after you plugged in that parking lot USB Dr. Brian Carrier at Cyber TriageCyber Triage on Google Cloud: DFIR in the Cloud Forensafe Investigating Sticky […]

Week 42 – 2021

Dr. Neal Krawetz at ‘The Hacker Factor Blog’Proving it now Robert Graham at Errata SecurityFact check: that “forensics” of the Mesa image is crazy Forensafe Investigating Typed Paths Solving HireMe Challenge with ArtiFast Windows Investigating Typed URLs İbrahim BaloğluDosya Tarih Manipülasyonu ve Tespiti (Anti -Forensics & Forensics) Kevin Pagano at Stark 4N6Samsung Power Off Reset […]

Week 41 – 2021

BohopsAnalyzing and Detecting a VMTools Persistence Technique CellebriteComputer Forensics: What Can You Do About Deleted Data? Kamala Kannan at CheckmateWindows Timeline: Putting the what & when together Craig Wilson at Digital DetectiveForensic Analysis of the Zone.Identifier Stream Brendan MccreeshSwimming in the SRUM Forensafe Investigating Outlook Windows Application Investigating Paint MRU Investigating Windows Calendar Forensic-Research [논문리뷰] […]

This Month In 4n6 – September – 2021

A monthly wrap-up of the DFIR news for September 2021. Thank you to those Patreon donors for the last month. This project takes a lot of time, so it’s very much appreciated that people see enough value in it to contribute back 🙂 If you are a Patreon donor the show notes will be found here. Special […]

Week 40 – 2021

BlueteamOpsSuper Charging Bulk DFIR triage with Node-RED, Google Log2timeline & Google Timesketch Forensafe Investigating UserAssist Investigating Google Chrome Web Browser Investigating Windows Run MRU Forensic-ResearchLNK File Structure Analysis Howard Oakley at ‘The Eclectic Light Company’Explainer: Logs InginformaticoForensic challenge losprys I: Presentation, tools and techniques [ENG] Jesse Spangenberger at ‘Cyber Fenix DFIR & Technology’CTF01: Cyberdefenders.org Joshua […]

Week 39 – 2021

Irfan Shakeel at AT&T CybersecurityNetwork traffic analysis using Wireshark Amina Zilic at BinalyzeAugust 2021 Binalyze Product Updates Dr. Neal Krawetz at ‘The Hacker Factor Blog’The Bayer Method Elcomsoft How to Put an iOS Device with Broken Buttons in DFU Mode Cloud Forensics: the New Reality Forensafe Investigating Thunderbird Windows Application Investigating RecentDocs MRU Inginformatico Reto […]

Week 38 – 2021

Cado SecurityThe Ultimate Guide to Docker & Kubernetes Forensics Dr. Neal Krawetz at ‘The Hacker Factor Blog’With Strings Attached Oleg Afonin at ElcomsoftForensic Implications of Sleep, Hybrid Sleep, Hibernation, and Fast Startup in Windows 10 Forensafe Investigating AmCache Investigating Foxit Reader InginformaticoReto forense losprys I — Presentación, herramientas y técnicas Junhyeong Lee at Plainbit [TIP#1] Microsoft defender […]

Week 37 – 2021

ArcPoint ForensicsmacOS Forensic Artifacts BelkasoftSignal decryption with Belkasoft X Cado SecurityYour Questions Answered: Cloud & Kubernetes Memory Forensics Forensafe Investigating Shellbags Investigating Opera Web Browser Shusei Tomonaga at JPCERT/CCHow to Use Volatility 3 Offline Magnet ForensicsAnatomy of A Ransomware Investigation Rory WagnerPart 1: Memory and Volatility Security Onion Quick Malware Analysis: malware-traffic-analysis.net data exfiltration exercise […]

Week 36 – 2021

eCrimeLabs“Analysis of competing hypotheses” to the rescue in incident response cases Erik Hjelmvik at NetresecCarving Packets from Memory Forensafe Investigating Facebook Messenger Windows Application Investigating Logon Banner Andrea Canepa at Zena ForensicsMcAFuse – open source McAfee FDE decryption Mike Cohen at VelocidexEvent Tracing For Windows Oxygen ForensicsGeoData Security Onion Quick Malware Analysis: malware-traffic-analysis.net BazaCall-BazaLoader pcap […]