Daily Blog #332: Forensic Lunch live from CEIC day 2!
Hello Reader, We got to do another broadcast live from CEIC and its been really fun to do. Being able to walk around and just grab people and bring them on the air to you has been great and...
View ArticleDaily Blog #333: Announcing the official launch of Triforce ANJP!
Hello Reader, Thanks to everyone who came out to our launch party at CEIC last night, I had a great time meeting all of you and I hope you had a great time as well. I am very happy to announce...
View ArticleDaily Blog #334: More on Encrypted iPhone backups
Hello Reader, Today we have a guest post from Brian Moran. Brian saw our Sunday Funday challenge based on Hal's recent testing for the SANS OSX Forensics class and generously followed up with...
View ArticleDaily Blog #335: Saturday Reading 5/24/14
Hello Reader, It's Saturday and after a long two weeks in Las Vegas it was back to the lab with expert reports and declarations waiting for me to write. If you are like me and recovering your...
View ArticleDaily Blog #336: Sunday Funday 5/25/14
Hello Reader, It's Sunday and time for another forensic challenge to see what you know and to share what you know with the community. With the official launch of our first product, Triforce ANJP,...
View ArticleDaily Blog #337: Sunday Funday Winner 5/25/14
A solemn memorial day reader, I guess you are all enjoying the three day weekend as I received no entries to this weeks contest. So I will donate this license to the first armed forces veteran who...
View ArticleDaily Blog #338: Triforce ANJP Free Edition
Hello Reader, I think its important to keep promises whenever you can. If you remember when we first started talking about the Triforce products we stated we always wanted to keep a free version...
View ArticleDaily Blog #339: A short product recommendation
Hello Reader, If you are like me then searching, de-duplicating and producing email for review is one of the banes of your existence. You would think that such fundamental task would have been...
View ArticleClik here to view.
Daily Blog #340: The leap from beta to final, Triforce updates
Hello Reader, If you are still running a Triforce beta, I would highly suggest you move over to the production version. We've fixed a lot of bugs and added lots of features. It's your choice...
View ArticleDaily Blog #341: Forensic Lunch 5/30/14
Hello Reader, We had a great forensic lunch today with some good conversation and great viewer participation. Our guests this week were:Sarah Edwards, @iamevltwin, talking about her...
View ArticleDaily Blog #342 Saturday Reading 5/31/14
Hello Reader, It's Saturday! Another week of forensics has passed us by and its time reflect on facts hard fought and mysteries left to solve. It's time for more links to make you think in this...
View ArticleDaily Blog #343: Sunday Funday 6/1/14
Hello Reader, We have now officially entered the last month of my year of blogging, let's make sure we end it well. It's Sunday and that means it's time for another challenge you can spend your day...
View ArticleDaily Blog #344: Sunday Funday 6/1/14 Winner!
Hello Reader, The world is always full of fud and conspiracy so I wanted to understand the mystery surrounding the Truecrypt website change and the rumors of a compromised binary in version 7.2....
View ArticleClik here to view.
Daily Blog #345: Extracting USN Journals in X-ways Forensics
Hello Reader, Today we have a guest post from Blazer Catzen, of Catzen forensics, who was nice enough to write up the procedure necessary to extract out USN Journals with X-ways forensics in a...
View ArticleDaily Blog #346: A quick note on Shellbag analysis in Windows 7/8
Hello Reader, If you are like me you love shellbags and use them on a regular basis to try to get some insight on what exists on external drives. One of the problems we run into though is that...
View ArticleDaily Blog #347: SANS @Night Presentation
Hello Reader, This post is for those of you who came to see my SANS @Night presentation at the DFIR Summit. I hope you enjoyed it and I've gotten you excited about file system journaling...
View ArticleDaly Blog #348: Forensic Lunch 6/6/14
Hello Reader, We had a great Forensic Lunch today. We didn't have any official guests this week , just Matthew, You and I talking about what was interesting to us this week. We talked about:1. The...
View ArticleDaily Blog #349: Saturday Reading 6/7/14
Hello Reader, It's been a long and enjoyable week helping out in FOR408 here at the SANS DFIR Summit. I've haven't kept up with blogs much this week as I focused on what was happening in...
View ArticleDaily Blog #350: Sunday Funday 6/8/14
Hello Reader, If you watched the Forensic Lunch yesterday you would have heard Matthew and I talking about developing tools for DFIR. Let's see how well you can quickly research and...
View ArticleDaily Blog #351: Sunday Funday 6/8/14 Winner!
Hello Reader, Thanks to all of you who voted, I won the best forensic blog of the year Forensic 4:Cast Award! With that said, it's time to crown a winner before posting today's slides tomorrow....
View Article
