2020 Wrap Up

2020 is finally over! How lucky we are to see the day (no seriously, really grateful, could have been a lot worse). Not that we’re out of the woods yet, but hopefully 2021 is a lot brighter for a lot of people. The year didn’t start off easy in Australia with the fires that caused […]

Week 52 – 2020

Last weekly post of the year! I’m still planning an end of year wrap up post, and the podcast though so still a bit more work to do 🙂 Marco Fontani at AmpedHow to Use Amped Authenticate Video PRNU to Check Whether a Video and Some Images Are From the Same Camera Andrea Fortuna at […]

Week 51 – 2020

FOR308 is now available OnDemand, read more about it here! Andrea Fortuna at ‘So Long, and Thanks for All the Fish’Mobile forensics: how to identify suspect network traffic Dr. Neal Krawetz at ‘The Hacker Factor Blog’iPhone Pictures Tegan Parsons at First ResponseThe evidence shows that… Vishva Vaghela at Hacking ArticlesComprehensive Guide on Autopsy Tool (Windows) […]

Week 50 – 2020

Andrea Fortuna at ‘So Long, and Thanks for All the Fish’OSX Forensics: a brief selection of useful tools Shafik Punja guest post on Arsenal ReconArsenal Image Mounter (AIM) Walkthrough Atropos4n6How to use Partition%4DiagnosticParser Bryan Ambrose at Data DigitallyApple Pattern of Life Lazy Output’er (APOLLO) on Windows Heather Mahalik at CellebriteNavigating The Analyzed Data Modal In […]

Week 49 – 2020

Bill Stearns at Active CountermeasuresWhere Do I Put My Zeek Sensor? Andrea Fortuna at ‘So Long, and Thanks for All the Fish’How to extract forensic artifacts from Linux swap Atropos4n6Are you sure you extract all the available Volume Serial Numbers (VSNs) that reside in the Windows 10 Event Log “Microsoft-Windows-Partition%4Diagnostic.evtx”? Blue Team BlogSIEM – Use […]

Week 48 – 2020

Alexander JägerGarmin .Fit file Forensics Andrea Fortuna at ‘So Long, and Thanks for All the Fish’iOS Forensic: full disk acquisition using checkra1n jailbreak Heather Mahalik at CellebriteKeyword Searching in Cellebrite BlackLight Content Search Cheeky4n6MonkeyiOS14 Maps History BLOB Script Giuseppe Scalzi at Compass SecurityThe “Volatility Triage App” for Splunk Danny Henderson JrSANS Community CTF November — Network Challenge […]

Week 47 – 2020

Chris at AskCleesSQLite Databases at hex level Craig Ball at ‘Ball in your Court’The Metadata Vanishes DFIR Review How Android Bluetooth Connections Can Determine if a Driver had Their Hands on the Wheel During an Accident Can Google Takeout Location Data Be Trusted? How to Use iOS Bluetooth Connections to Solve Crimes Faster Can You […]

Week 46 – 2020

Andrea Fortuna at ‘So Long, and Thanks for All the Fish’Linux Forensics: Memory Capture and Analysis Heather Mahalik at CellebriteHow To Use Cellebrite Physical Analyzer’s New Cloud Feature Dany at DigitellaWireshark for Network Forensics! Deepak KumarDigital Forensics Corner 1 Elcomsoft iOS 14.2, iOS 12.4.9, the Updated checkra1n 0.12 Jailbreak and File System Extraction Elcomsoft and […]