Mac MRU Parser – Spotlight Shortcuts & BLOB Parsing
Sarah Edwards has updated her Mac MRU Parser. Now it parses the Spotlight Shortcuts plist and also the Bookmark and Alias BL…
How to Recover Event Logs from a Windows Memory Image
Another interesting article has been posted by Andrea Fortuna. This time he is writing about event logs recovery from a Wind…
Carving EVTX
Quentin Jerome from RawSec shared an article on carving Windows Event Logs in EVTX format. He gives a short overview of the …
Hunting Fileless Malware with LOG-MD Free Edition
In this video you will learn how to hunt so called “Fileless malware” or “Non-Malware malware” using…
Mac RAM Imaging and Analysis
BlackBag Training Team has published a post about Mac memory imaging and analysis. They start from different ways of capturi…
Bitscout: Remote Forensics Meta Tool
Bitscout allows anyone who is running Ubuntu OS to build own LiveCD/LiveUSB image to be used for remote digital forensics (o…
Windows Forensics Cookbook
Packt Publishing has announced a book by Oleg Skulkin (Cyber Forensicator) and Scar de Courcier (Forensic Focus). “Win…
Brian Carrier: Sleuth Kit Lightening Talk
Brian Carrier (@carrier4n6) is the Vice President of Digital Forensics at Basis Technology, a software company specializing …
Forensic Analysis of Email Attachment Timestamps in Outlook
Arman Gungor from Meridian Discovery has posted an article on forensic analysis of Microsoft Outlook attachments. In the art…
Windows Application Compatibility Forensics
Richard Davis has posted another video as a part of his “Introduction to Windows Forensics”, which shows three a…
