Mac RAM Imaging and Analysis
BlackBag Training Team has published a post about Mac memory imaging and analysis. They start from different ways of capturi…
Fuzzy Hashing with SSDEEP
In this video Joshua James uses SSDEEP to create fuzzy hashes of text and image files, and compare the similarity between fi…
Bitscout: Remote Forensics Meta Tool
Bitscout allows anyone who is running Ubuntu OS to build own LiveCD/LiveUSB image to be used for remote digital forensics (o…
Chromensics – Google Chrome Forensics
Chromensics is an open source tool by Nishant Grover capable of reading all information from Chrome Browser directory and pr…
Windows Forensics Cookbook
Packt Publishing has announced a book by Oleg Skulkin (Cyber Forensicator) and Scar de Courcier (Forensic Focus). “Win…
Adding AFF4 support to The Sleuth Kit and Volatility on macOS
AFF4 (Advanced Forensics File Format v4.0) is the new standard in forensic imaging, a new container format for storing digit…
Brian Carrier: Sleuth Kit Lightening Talk
Brian Carrier (@carrier4n6) is the Vice President of Digital Forensics at Basis Technology, a software company specializing …
Windows Application Compatibility Forensics
Richard Davis has posted another video as a part of his “Introduction to Windows Forensics”, which shows three a…
Create YARA rules from strings found in malware automatically with yarGen
With help of yarGen you can generate YARA rules automatically. The main principle is the creation of yara rules from strings…
An Introduction to VolUtility
Basil Alawi S.Taher has posted a nice overview of how to start using VolUtility – a web frontend for Volatility framew…
