Mike Cary has written a PowerShell script that automates the use of Eric Zimmerman’s cmd line tools (https://ericzimme…

LiMEaide is a python application designed to remotely dump RAM of a Linux client and create a volatility profile for later a…

This is a quick look at the recently revealed “activities” API within Office 365. This undocumented interface pr…

So, we decided to finish our write-up today. The forth part – the most interesting part. Intrusion! Again, no more AXI…

Hope you are having a great Sunday, and we are continuing our write-up. No more AXIOM, by the way! You wanted open source to…

We are continuing our write-up. The second part will walk you through the solution of the second set of CTF problems –…

Yesterday Troy Schnack and Kevin Pagano suggested on Twitter that it would be good to write how I solved Magnet User Summit …

afro can parse APFS images. It not only extracts the latest data but also older versions of the files. Learn more about the …

Darwin-Collector.sh is a script designed to be run against a mounted image, live system, or device in target disk mode. The …

Volatility Foundation has announced this year’s Plugin Contest. All you need is to create an innovative and useful ext…