Все публикации

0:09:11

NTFS FILE Record Reuse

0:56:48

13Cubed XINTRA Lab Walkthrough

0:03:27

Linux Memory Forensics Challenge

0:20:53

Shimcache Execution Is Back - What You Need to Know!

0:07:20

Mounting Linux Disk Images in Windows

0:01:27

New Course! Investigating Linux Devices

0:09:52

The Weird Windows Feature You've Never Heard Of

0:28:43

The Ultimate Guide to Arsenal Image Mounter

0:06:37

Where's the 4624? - Logon Events vs. Account Logons

0:11:54

RDP Authentication vs. Authorization

0:02:52

Investigating Windows Courses

0:10:39

Hyper-V Memory Forensics - MemProcFS to the Rescue!

0:10:13

An Important Change to ShellBags - Windows 11 2023 Update!

0:08:07

VMware Memory Forensics - Don't Miss This Important Detail!

0:34:39

Old School MS-DOS Commands for DFIR

0:23:16

Detecting PsExec Usage

0:30:26

A File's Life - File Deletion and Recovery

0:15:13

Two Thumbs Up - Thumbnail Forensics

0:30:36

Interview with Lesley Carhart (hacks4pancakes)

0:15:56

It's About Time - Timestamp Changes in Windows 11

0:28:06

EZ Tools Manuals Interview with Andrew Rathbun

0:13:00

A New Program Execution Artifact - Windows 11 22H2 Update!

0:15:47

The Dissect Effect - An Open Source IR Framework

0:17:13

Let's Talk About MUICache