Investigating the Cyber Breach: The Digital Forensics Guide for the Network Engineer
Cisco Press has announced a new book by Joseph Muniz and Aamir Lakhani entitled “Investigating the Cyber Breach: The D…
Chainsaw of Custody: Manipulating forensic evidence the easy way
Wolfgang Ettlinger fromĀ SEC Consult Vulnerability Lab has published an interesting research on how to manipulate forensic ev…
Rapid Provisioning of a Malware Analysis Environment
Adam Kramer has published a post in SANS DFIR blog aboutĀ ‘rapid_env’. This is an open source tool he developed, …
The new version of Mandiant Redline supports Windows 10
Redline version 1.20 introduces support for collection from and analysis of Window 10 systems and is already available for d…
Recovering Data from Damaged USBs
Preston Miller from DPM Forensics has published a post on how to recover data from damaged USBs. In the post heĀ discusses a …
Hunting Webshells on Microsoft Exchange Server
Microsoft Exchange Servers are a high value target, making investigation of them during Incident Response vital, but where d…
PPEE: cross-platform PE explorer
If you prefer to use different platforms for malware analysis and forensics, here is a good fresh tool for you – PPEE …
Authorship Attribution for Social Media Forensics
The veil of anonymity provided by smartphones with pre-paid SIM cards, public Wi-Fi hotspots, and distributed networks like …
Automating print logging for DFIR purposes
Medium userĀ @rootsecdev has published a post on how to automateĀ print logging for DFIR purposes. In the post the author show…
Brush up on Dropbox DBX decryption
Francesco Picasso from Zena Forensics has published a blog post on how to decrypt Windows Dropbox DBX files. Reading the pos…
