If your organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Emi Polito at Amped How To Investigate Video Evidence: W…
While doing some digging at my old job we found that sometimes Amcache might present data that isn't reflected in the PE it relates to.
We didn't figure out why this happens, but Velociraptor is the perfect tool for digging in deeper
thinkdfir.com/2026/04/25/t... #DFIR
If your organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis F-Response F-Response Collect, X-Ways, and You Forensafe…
If you’re organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Andrea Fortuna PowerShell DFIR 2026: from MemPro…
If you’re organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Chad Gish at Magnet Forensics Windows forensics:…
If you’re organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Andrew Garrett A Digital Forensic View: How iOS …
If your organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Brian Carrier at Cyber Triage DFIR+AI Primer: How to Com…
If you’re organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Andrew Garrett Why iOS and Android Handle GPS Di…
Stop scaling headcount. Scale your SecOps.Most security teams don’t have a talent problem, they have a noise problem. Material Security unifies your cloud workspace, providing detection and respons…
During an engagement at $lastdayjob we found a possible bug in AmCache so I wanted to dig into it a bit deeper. Mostly this is a call for help, and an explanation of how to test! TLDR Sometimes AmC…
Stop scaling headcount. Scale your SecOps.Most security teams don’t have a talent problem, they have a noise problem. Material Security unifies your cloud workspace, providing detection and respons…
