Blog

Categories


Dates

Learn how to do jump lists forensics in 2025

Jump Lists Forensics 2025

Start Reading

Information Artifacts: Simplify DFIR Analysis

Start Reading

3.13 Adds MemProcFS and Extends the S3 and Recorded Future Sandbox Integrations

Start Reading

3.12 Adds Data Exfiltration Detection, USB Devices, and Easier Validation

Start Reading

DFIR Breakdown: Impacket Remote Execution Activity – Smbexec

Start Reading

DFIR Next Steps: What To Do After You Find A Suspicious Use Of Remote Monitoring & Management Tools

Start Reading

DFIR Breakdown: Impacket Remote Execution Activity – atexec

Start Reading

DFIR Next Steps: What To Do After You Find a Suspicious Use Of curl.exe

Start Reading

DFIR Next Steps: What To Do After You Find a Suspicious Use Of certutil.exe

Start Reading

DFIR Breakdown: Using Certutil To Download Attack Tools

Start Reading

Access More! BitLocker, new File Explorer, and Export All Files (3.11 release)

Start Reading

Limitations of ImpHash for DFIR

Limitations of ImpHash for DFIR

Start Reading