Introduction to Redline
As a continuation of the “Introduction to Memory Forensics” series, Richard Davis taking a look at Redline – a free analysis…
DROP (DRone Open source Parser) your drone: Forensic analysis of the DJI Phantom III
The DJI Phantom III drone has already been used for malicious activities (to drop bombs, remote surveillance and plane watch…
Automating Large-Scale Memory Forensics
Henrik Johansen has published a post about how to automate memory forensics process as much as possible. He starts from the …
Plaso Heimdall Has Been Released
The Plaso development team has announced the new version of the tool – Heimdall. Here is the list of new features: New…
SANS SQLite Pocket Reference Guide
This guide is a supplement to SANS FOR518: Mac Forensic Analysis and SANS FOR585: Advanced Smartphone Forensics, and enhance…
Taking Hunting to the Next Level: Hunting in Memory
The vast majority of threat hunting takes place on easily visible and accessible system artifacts. These include log entries…
Steve Whalen on APFS Forensics
APFS is here! Macintosh forensics expert and SUMURI CEO Steve Whalen gives you the critical information you need to stay ahe…
Investigating Malware Using Registry Forensics
Here is Jason Hale’s talk from Louisville Infosec 2017 titled “Investigating Malware Using Registry Forensics…
Decision-Theoretic File Carving
This article explores a novel approach to file carving by viewing it as a decision problem. This allows us to design algorit…
Get Practical Windows Forensics for Free!
Today you have a unique opportunity to get a digital copy of Practical Windows Forensics (Packt Publishing) by Ayman Shaaban…
