bulk_extractor 2.2.0 is out: a security and reliability release fixing CVE-2026-24857, with a standalone 64-bit Windows build, Windows raw-device input, runtime scanner plug-ins, improved Wi-Fi PCAP handling, and more.
https://t.co/TzmewAFJXH
#DFIR#DigitalForensics
Here's a great article on modernizing long-living software for newer language implementations and conventions, courtesy of @xchatty and @codeslack
Highlighted in this paper is the new v2.x of #bulk_extractor which is currently production-ready:
https://t.co/Y1lC1aORnz
@xchatty I ran some tests against E01 packaging today and it worked very well. I didn't find any errors so far. Speeds seemed good, although it complained about likely I/O exhaustion on that test machine. I'll report back on Github if I find anything useful.
@dhh I just did this using Grok and it correctly diagnosed a chromium crash related to a stale gpu thread. Very impressive how quickly it walked through the logs, analyzed the crash dumps, symbolized the necessary files, and found the cause a the solution(s).
@vibefodder@Aditya_181105 It can certainly be done, but to pretend there’s no effort involved in the steps you just outlined is incorrect. This is especially true for most regular computer users out there. Totally unacceptable
We just released Hibernation Recon v1.2.3.96 with some awesome updates - Windows 24H2 & 25H2 support, new decompression algorithms, now runs on Windows on Arm & Linux, etc. How do you analyze Windows hibernation? https://t.co/w8v2JqX7rn #DFIR
Here’s something you don’t see every day in #DFIR - launching a virtual machine from a Linux laptop (safely booted with WinFE) connected to Arsenal Image Mounter across a network via AIM Remote Agent! https://t.co/w8v2JqX7rn
Exploring @thelazza’s new release of Fuji for Mac acquisitions sparked a fun take on making a “Fuji Cartridge” necessary for it to replicate to RAM-disk in recovery mode.
https://t.co/u7aJyy1k7Y
Today marks the release of our new desktop environment, @COSMIC_desktop , alongside Pop!_OS 24.04 LTS—allowing us to provide our users what they want and to innovate further. There’s a ton of new customization and productivity features to explore!