Week 22 – 2017

Voting has closed for the 4Cast award, thanks for the votes! I’ll be attending the DFIR Summit where the awards are given out this year. Hopefully, the next time I post about this it will be a picture of the prize! FORENSIC ANALYSIS Albert Barsocchini and Sam Maccherola at AccessData list three challenges when extracting […]

Week 21 – 2017

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 Only a few more days to go till voting closes too. 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS Luis Rocha at Count Upon Security talks about the USNJrnl artefact on NTFS, and how […]

Week 20 – 2017

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS The guys at Cyber Forensicator shared a couple of articles this week They shared a paper by Abdulalem Ali, Shukor Abd Razar, Siti Hajar Othman, Arafat […]

Week 19 – 2017

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS The guys at Cyber Forensicator have shared the news that Joseph Muniz and Aamir Lakhani book, titled “Investigating the Cyber Breach: The Digital Forensics Guide for […]

Week 18 – 2017

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting UPCOMING WEBINARS In self-promotion news (yes, I moved this section to the top of the site this week ;)), I will be presenting a SANS webcast on Thursday […]

Week 17 – 2017

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS As an update to a post by Mari, there’s been a bit of talk about a newly located registry subkey that indicates the actual install date […]

Week 16 – 2017

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS Jonas Plum has started to reverse engineer the new Apple File System (APFS) and shares his research. APFS filesystem format  The guys at Cyber Forensicator shared […]

Week 15 – 2017

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS The Blackbag Training Team show how Blacklight can be used to examine the Windows Registry Windows Registry Demystified – Part Two Joanna Shemesh at Cellebrite explains […]

Week 14 – 2017

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS James Habben at 4n6ir has updated his CCM_RecentlyUsedApps record structure Enscript carver to support unicode characters. CCM_RecentlyUsedApps Update on Unicode Strings The Blackbag Training Team share […]

Week 13 – 2017

Nominations for the 2017 Forensic 4Cast Awards closed during the week, but Lee has tallied the nominations and voting is now open until May 31. Thank you to everyone who nominated this blog, as a result it was one of the top three, and therefore able to be voted for! If you’d like to vote […]