The Most Essential Image Data Retrieval for Digital Forensic Experts
This article is a general explanation why and how forensic experts and first responders could benefit from a tool that provi…
Open Forensic Images with Forensic7z
Forensic7z is a plugin for 7-Zip archiver that can be used for opening and browsing disk images created by specialized softw…
Refined VirusShare Hash Sets
MantaRay Forensics team converted VirusShare.com 0-337 hash sets to RAW, EnCase and Autopsy format. The new set contains 31,…
Extract forensic timeline from memory dumps with AutoTimeliner
Andrea Fortuna created the AutoTimeliner, a tool that “automagically extract forensic timeline from volatile memory du…
RBCmd: Recycle Bin artifact parser
Eric Zimmerman has released a new tool. This time it’s Recycle Bin artifact parser called RBCmd. It supports both INFO…
CAINE 10.0 “Infinity” is out
A new version of CAINE (Computer Aided INvestigative Environment) has been released. Version 10.0 includes new OSINT, Autops…
Messaging App Forensics with Autopsy
Here’s Brian Carrier’s presentation from Open Source Digital Forensics Conference (OSDFCon) 2018. In the present…
Apple Pattern of Life Lazy Output’er (APOLLO)
Sarah Edwards presented a new tool called APOLLO or Apple Pattern of Life Lazy Output’er. The tool was presented at Ob…
Backstage Parser
Arsenalâs Brian Gerdon presented Backstage Parser – a python tool that can be used to parse the contents of Microsoft …
Acquire Volatile Memory from FreeBSD with FreeBmAM
Free-B-sd m-emory A-cquisition M-odule Tool/Kernel Module allows acquisition of volatile memory from FreeBSD. You can learn …
