Digital Forensics and Incident Response
Another DFIR book has been announced by Packt Publishing. It’s “Digital Forensics and Incident Response” b…
Analysis of a Ford Sync Gen 1 Module
James Grant has posted his findings from an analysis of a Ford Sync first generation module he undertook as part of his mast…
Windows Prefetch Carver
Adam Witt has presented a fresh Python script. It’s called Windows Prefetch Carver and, as you already understood, can…
Forensic Lunch: Live From Enfuse
Join David Cowen and his friends live from Enfuse 2017: …
Development and validation of a Database Forensic Metamodel (DBFM)
Database Forensics (DBF) is a widespread area of knowledge. It has many complex features and is well known amongst database …
Using Binsnitch.py to Detect Files Touched by Malware
Daan Raman from NVISO Labs has published a blog post about their new tool – binsnitch.py. You can use this tool to det…
Exposing Command Line Shells History with PowerShell
Eyal Neemany has published a post on how to use PowerShell to expose command line shells history. He notes that the biggest …
Python Digital Forensics Cookbook
Another digital forensic book from Packt Publishing has been announced. This time it’s “Python Digital Forensics…
WannaCry Ransomware – Incident Response Playbook
This response plan includes steps to contain the threat, hunt for existing infections, and remediation. Following is a list …
A metamodel for mobile forensics investigation domain
With the rapid development of technology, mobile phones have become an essential tool in terms of crime fighting and crimina…
