Free Digital Forensic Tools
Guys from Forensic Control have updated their list of free digital forensic tools. The list was last reviewed on 30 August 2…
Windows Memory Analysis
As a continuation of the âIntroduction to Memory Forensicsâ video, Richard Davis will show you how to use Volatility to anal…
Hindsight has been updated to v2.1.1
Hindsight, an open source Chrome forensics tool, has been updated to version 2.1.1. Support for Chrome versions 1 – 60…
Memory Acquisition and Virtual Secure Mode
Jason Hale has published a post about the impact of VBS on memory acqusition. With Windows 10 and Server 2016, Microsoft add…
CCF-VM 2.1 has been released
CyLR CDQR Forensics Virtual Machine (CCF-VM) by Alan Orlikoski has been updated to version 2.1. Added TimeSketch!!!! Include…
Scanning Memory with Yara
Memory analysis has been successfully utilized to detect malware in many high profile cases. The use of signature scanning t…
The Sleuth Kit 4.4.2 and Autopsy 4.4.1 have been released
New versions of your favourite open source DFIR tools – the Sleuth Kit and Autopsy, – have been released. The Sl…
Windows MACB Timestamps (NTFS Forensics)
As a continuation of the “Introduction to Windows Forensics” series by Richard Davis, this video introduces the …
WMI Forensics
There are two scripts by David Pany, which can help an analyst to find evidence in WMI repositories: CCM_RUA_finder.py and P…
Understanding lateral movement with Adlumin
In this video lateral movement is explained with help of Adlumin Platform: …
