GiftStick: 1-Click Push Forensics Evidence to the Cloud
GiftStick allows an inexperimented user to easily (one click) upload forensics evidence (such as some information about the …
Autopsy 4.9.0 and the Sleuth Kit 4.6.3 released
New versions of our open source DFIR tools have been released: Autopsy New Features: Removed data from table that are time i…
Beyond good ol’ LaunchAgent – part 0
Pasquale Stirparo has started a post series about macOS persistense mechanisms titled “Beyond good ol’ LaunchAge…
Cloud Forensics: Google Drive
We decided to continue our cloud forensics series, but focus on more popular desktop applications, this time it’s goin…
Amcache_Scan Autopsy Plugin
This Autopsy plugin by Rebecca Anderson won Autopsy Plugin Contest this year at Open Source Digital Forensics Conference (OS…
Spotting the Signs of Lateral Movement
Derek King has published another post as part of his “Hunting with Splunk: The Basics” series. This time he is d…
DFIR SQL Query Repository
Alexis Brignoni has started a collection of SQL query templates for digital forensics use, and already uploaded a bunch. It&…
Living in the Shadow of the Shadow Brokers
Most people know the Shadow Brokers leaked (supposedly) stolen NSA cyber tools, which lead to some of the most significant c…
DFRWS IoT Forensic Challenge (2018 – 2019)
DFRWS presented a new challenge – this year they continue to motivate forensicators to research and develop in the fie…
Magnet AXIOM Incident Response Examinations (AX310)
Magnet Forensics announced a new expert-level four-day training course. It is designed to give you the knowledge and skills …
