2018 Volatility Plugin Contest
Volatility Foundation has announced this year’s Plugin Contest. All you need is to create an innovative and useful ext…
Docker Explorer – a Tool to Help Forensicate Offline Docker Acquisitions
This project helps a forensics analyst explore offline Docker filesystems. Docker uses layered backend filesystems like AuFS…
Windows Process Genealogy
As an incident responder, one of the things you need to be able to quickly do when looking at a list of processes, is immedi…
Exploring Registry Explorer
This webinar covers Registry Explorer version 1.0 including features such as searching multiple hives, transaction log repla…
What is new in Belkasoft Evidence Center 9.0
In this video, Belkasoft discusses new features of Evidence Center version 9.0 such as new reporting, deduplication, PhotoDN…
Dshell: An Extensible Network Forensic Analysis Framework
Dshell is an extensible network forensic analysis framework, that enables rapid development of plugins to support the dissec…
Forensic Review with Notepad++
In this post Hoyt Harness writes about how to add Plugin Manager to Notepad++ and make it very extensible and useful for dig…
Make Your Debian a Forensic Workstation
If you are looking for a SIFT replacement and already have a Debian workstation, this package is for you. Forensics-full pac…
Autopsy 4.6.0 Linux Beta 1
The first beta Linux version of your favourite open source DFIR tool Autopsy. You can download it here. Now the tool has the…
The Sleuth Kit and Autopsy 4.6.0 have been released
The Sleuth Kit and Autopsy 4.6.0 are available for downloading. Here are the lists of new features: The Sleuth Kit New Commu…
