GiftStick: 1-Click Push Forensics Evidence to the Cloud
GiftStick allows an inexperimented user to easily (one click) upload forensics evidence (such as some information about the …
Autopsy 4.9.0 and the Sleuth Kit 4.6.3 released
New versions of our open source DFIR tools have been released: Autopsy New Features: Removed data from table that are time i…
Amcache_Scan Autopsy Plugin
This Autopsy plugin by Rebecca Anderson won Autopsy Plugin Contest this year at Open Source Digital Forensics Conference (OS…
DFRWS IoT Forensic Challenge (2018 – 2019)
DFRWS presented a new challenge – this year they continue to motivate forensicators to research and develop in the fie…
Magnet AXIOM Incident Response Examinations (AX310)
Magnet Forensics announced a new expert-level four-day training course. It is designed to give you the knowledge and skills …
Using hashcat to decrypt iOS notes for Cellebrite’s Physical Analyzer
This video will show you how to decrypt encrypted notes (password protected) on iOS devices and enter the password into Cell…
winmem_decompress: Extract Сompressed Memory Pages from Page-Aligned Data
Maxim Suhanov presented winmem_decompress – a program that tries to extract compressed memory pages from page-aligned …
Hands-On Network Forensics: Investigate network attacks and find evidences using common network forensic tools
A new book by Arthur Salmon has been announced by Packt Publishing. The book is titled “Hands-On Network Forensics: In…
libfsapfs: Library and Tools to Access the Apple File System (APFS)
libfsapfs is a library and tools by Joachim Metz to access the Apple File System (APFS). Source code is available at GitHub.…
Evidence Generation X
Test evidence lies at the heart of our field. We need to be able to test our tools to make sure that they parse data correct…
