Author: Phill Moore

I am a digital forensics analyst. I have a couple of blogs - This Week In 4n6 and Think DFIR I go by randomaccess (or variations of) on a number of DFIR social channels.
Written by Phill Moore

Week 10 – 2017

Nominations for the 2017 Forensic 4Cast Awards are still open! If you’d like to nominate this site for blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Nominations are Open FORENSIC ANALYSIS Blackbag updated their blog on iOS 10 and Mobile Device Management.They “have added instructions on how to […]

Written by Phill Moore

Week 9 – 2017

Nominations for the 2017 Forensic 4Cast Awards are still open! If you’d like to nominate this site for blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Nominations are Open FORENSIC ANALYSIS James Habben at 4n6ir explores the SCCM database, and after using the tool produced by the guys […]

Written by Phill Moore

Week 8 – 2017

Nominations for the 2017 Forensic 4Cast Awards are still opened! If you’d like to nominate this site for blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Nominations are Open FORENSIC ANALYSIS Mari DeGrazia at Another Forensic Blog posted twice this week First, she noticed that Windows install dates […]

Written by Phill Moore

Week 7 – 2017

Nominations for the 2017 Forensic 4Cast Awards are still opened! If you’d like to nominate this site for blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Nominations are Open FORENSIC ANALYSIS The Blackbag Training Team show the various aspects of the Windows registry and setupapi.dev.log that contain information […]

Written by Phill Moore

Week 6 – 2017

Nominations for the 2017 Forensic 4Cast Awards are still opened! If you’d like to nominate this site for blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Nominations are Open A colleague made a suggestion to reorder the categories slightly, so I’m giving it a go. FORENSIC ANALYSIS The guys […]

Written by Phill Moore

Week 5 – 2017

Nominations for the 2017 Forensic 4Cast Awards are still opened! If you’d like to nominate this site for blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Nominations are Open SOFTWARE UPDATES Didier Stevens updated his zipdump Python script to version 0.0.5, adding the “-E option value with # to […]

Written by Phill Moore

Week 4 – 2017

Nominations for the 2017 Forensic 4Cast Awards have opened! If you’d like to nominate this site for blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Nominations are Open SOFTWARE UPDATES MISP was updated to version 2.4.61, and then 2.4.62 during the week. The updates include “a critical bug […]

Written by Phill Moore

Week 3 – 2017

SOFTWARE UPDATES Cellebrite have updated UFED Logical/Physical Analyzer and UFED Reader to version 5.4.7, adding in new app versions and resolving some bugs. If you used the previous version to parse the iOS Viber app, I’d run it again to be sure. UFED Physical Analyzer, UFED Logical Analyzer and UFED Reader 5.4.7 Maintenance Release (January […]

Written by Phill Moore

Week 2 – 2017

SOFTWARE UPDATES Nir Sofer has updated CredentialsFileView to version 1.05. The new version “allows you to decrypt the data stored inside Windows Credentials files of the current user without login password.” Check out @Nirsoft’s Tweet Mark Woan updated Aurorun Logger UI to version 1.0.6, and Autorun Logger Server to version 1.0.10, adding “new features, improved […]

Written by Phill Moore

Week 1 – 2017

First post of 2017 and it’s a big one! Also, thanks to everyone who retweeted/mentioned my site in the last week. Really saw a jump in the numbers 🙂 SOFTWARE UPDATES Oxygen Forensics updated their Detective product to version 9.1.1, adding a SIM card extraction module, additional application and device support as well as other […]