Volatility: Proxies and Network Traffic
Marcus Bakker from MB Secure has published a tutorial on how to catch malware beaconing from an infrastructure where a non-t…
Forensic Review with Notepad++
In this post Hoyt Harness writes about how to add Plugin Manager to Notepad++ and make it very extensible and useful for dig…
Make Your Debian a Forensic Workstation
If you are looking for a SIFT replacement and already have a Debian workstation, this package is for you. Forensics-full pac…
Autopsy 4.6.0 Linux Beta 1
The first beta Linux version of your favourite open source DFIR tool Autopsy. You can download it here. Now the tool has the…
Forensic Lunch with Maxim Suhanov
This time the “Forensic Lunch” with David Cowen meets Maxim Suhanov – digital forensics analyst, researche…
ReversingLabs Hash Query Plugin for Autopsy
Polito Inc. has partnered with ReversingLabs (RL) and has developed a plugin extension called ReversingLabs Lookup Utility f…
Extracting Data from a Samsung Device Using Advanced MTP
In this post Christopher Vance is writing about using advanced MTP to extract data from a Samsung mobile device. This method…
Volatility Profiles and Windows 10
As of the recording of this video, the current version of Volatility is 2.6; however, even if you have this version installe…
Forensic Analysis of Damaged SQLite Databases
SQLite databases are very common sources of forensic artifacts nowadays. A lot of mobile applications store data in such dat…
Forensic Challenges
Amam Hardikar has collected forensic challenges (including computer forensics, network forensics, malware analysis, etc) fro…
