Introduction Sooner or later, most forensics experts have to deal with damaged hard drives. It is certain to happen. We deal…

David Cowen’s Sunday Funday is back, so why not to take part in this fun? Last Sunday’s challenge was to look at…

For some reason, there are not so many posts on forensic examination of hosts infected with different malware families. We d…

Forensicating one of compromised hosts during our recent incident response activities we have found some interesting artifac…

Looking for a “new” Windows artifact that is currently being underutilized and contains a wealth of information? Event Traci…

Eric Zimmerman has released a new tool. This time it’s Recycle Bin artifact parser called RBCmd. It supports both…

Andrea Fortunan has released his “The Little Handbook of Windows Forensics”. Here is the description from the au…

We decided to continue our cloud forensics series, but focus on more popular desktop applications, this time it’s goin…

This Autopsy plugin by Rebecca Anderson won Autopsy Plugin Contest this year at Open Source Digital Forensics Conf…

Guys, we have created a Telegram group, where we will do our best to answer all your questions. We will be very happy if you…