Author: Phill Moore

I am a digital forensics analyst. I have a couple of blogs - This Week In 4n6 and Think DFIR I go by randomaccess (or variations of) on a number of DFIR social channels.
Written by Phill Moore

Week 5 – 2017

Nominations for the 2017 Forensic 4Cast Awards are still opened! If you’d like to nominate this site for blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Nominations are Open SOFTWARE UPDATES Didier Stevens updated his zipdump Python script to version 0.0.5, adding the “-E option value with # to […]

Written by Phill Moore

Week 4 – 2017

Nominations for the 2017 Forensic 4Cast Awards have opened! If you’d like to nominate this site for blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Nominations are Open SOFTWARE UPDATES MISP was updated to version 2.4.61, and then 2.4.62 during the week. The updates include “a critical bug […]

Written by Phill Moore

Week 3 – 2017

SOFTWARE UPDATES Cellebrite have updated UFED Logical/Physical Analyzer and UFED Reader to version 5.4.7, adding in new app versions and resolving some bugs. If you used the previous version to parse the iOS Viber app, I’d run it again to be sure. UFED Physical Analyzer, UFED Logical Analyzer and UFED Reader 5.4.7 Maintenance Release (January […]

Written by Phill Moore

Week 2 – 2017

SOFTWARE UPDATES Nir Sofer has updated CredentialsFileView to version 1.05. The new version “allows you to decrypt the data stored inside Windows Credentials files of the current user without login password.” Check out @Nirsoft’s Tweet Mark Woan updated Aurorun Logger UI to version 1.0.6, and Autorun Logger Server to version 1.0.10, adding “new features, improved […]

Written by Phill Moore

Week 1 – 2017

First post of 2017 and it’s a big one! Also, thanks to everyone who retweeted/mentioned my site in the last week. Really saw a jump in the numbers 🙂 SOFTWARE UPDATES Oxygen Forensics updated their Detective product to version 9.1.1, adding a SIM card extraction module, additional application and device support as well as other […]

Written by Phill Moore

Week 52 – 2016

Last post of the year! Happy New Year peoples. Hope everyone’s holiday/break has been restful. I’m going to take a short break for the rest of the year and be back for Week 1 2017 😉 SOFTWARE UPDATES Michael Hale Ligh has announced the release of Volatility 2.6. “This release improves support for Windows 10 […]

Written by Phill Moore

2016 Wrap Up

Since I started in Week 2 of this year I figured I should do an additional post to take it up to 52 total for the year. Here are a few things I’ve learned about blogging and things I’ve noticed. You’ve read it all before elsewhere, but now it’s coming from me 🙂 First off […]

Written by Phill Moore

Week 51 – 2016

Posting a little earlier this week because of the holiday. Merry Christmas! Happy Hannukah! Happy Festivus! Here is my present to you 🙂 SOFTWARE UPDATES Phil Harvey updated ExifTool to version 10.37 (development release) adding support for new tags and additional information, as well as bug fixes and minor improvements. Dec. 19, 2016 – Version […]

Written by Phill Moore

Week 50 – 2016

Much busier week this week. I think this is my longest post so far. Looks like everyone’s gearing up for the holidays so they’re posting everything now. I’ll be posting slightly earlier for the next couple weeks because the holidays fall on days I don’t want to spend working. Enjoy! SOFTWARE UPDATES Didier Stevens updated two […]

Written by Phill Moore

Week 49 – 2016

SOFTWARE UPDATES Mark Woan has released new versions of his autorun logger (UI v1.0.4 and Server v1.0.9) with “Fairly major changes such as shows linked Autoruns, can hide/acknowledge alerts”. Mark advises that it’s “best to drop the database and then recreate with the new schema”. UI Release, Server Release Didier Stevens updated his Python script […]