Forensicator

Digital Forensics

[Forensicator @Forensicator4]

@_RyanBenson Thanks for doing this Ryan! There's been so much great info, I've really enjoyed following it :)

[Forensicator @Forensicator4]

#MagnetWeeklyCTF Week 4 done and dusted! I think I got a bit lucky with a keyword search this time round though 😳

[Forensicator @Forensicator4]

Managed #MagnetWeeklyCTF challenge 3 on my last attempt. Apparently I've done it the hard way so I can't wait to see everyones write-ups! Learned a lot though so it was worth it 🙂

[Forensicator @Forensicator4]

#MagnetWeeklyCTF challenge 2 completed. I thought I knew where to look for this one but I had to go digging elsewhere!

[Forensicator @Forensicator4]

Just did Challenge 1 of #MagnetWeeklyCTF, looking forward to next week already! https://t.co/0xy79LaxuL

[Christopher Vance  @cScottVance]

I've been working on this one for a while and hoping it helps some folks. Tracking app containers, shared containers, and plugins using an unsuspecting .plist file. https://t.co/zajCdLu9nD

[Forensicator @Forensicator4]

Blog time! This one's a write-up of a CTF that had me digging through NTFS artefacts I don't use every day. It was a real challenge and very enjoyable, made all the more interesting by not having most of my usual tools available https://t.co/dTEKNrtYlB

[Forensicator @Forensicator4]

@phillmoore @GCHQ I couldn't agree more! The decoding and "magic" features are so useful when working with an unknown data type. (And how else am I supposed to check if something is numberwang??)

[Forensicator @Forensicator4]

Windows users rejoice! This is such a useful tool 😀

[Yogesh Khatri @SwiftForensics]

KTX to PNG conversion in python.. accomplished! For processing ios app snapshots 📱.
Should be added to iLEAPP very soon..
https://t.co/E4kT3nsA5R #DFIR

[Forensicator @Forensicator4]

@sansforensics will the talks be available on-demand after the summit?

[Ryan Benson @_RyanBenson]

#DailyDFIR 185: New input/output modes for Unfurl! 🌿

If you pass Unfurl a file path instead of a URL, it will open that file and parse each line in it.

Using -o option will save output to a CSV file (leave off to send output to screen).

Thanks @B1N2H3X for the request! #DFIR

[Forensicator @Forensicator4]

I learnt loads doing @teambi0s MemLabs w/ @volatility, @MagnetForensics & CyberChef!
Here are my write-ups:
1- https://t.co/0kR85RaLJ8
2- https://t.co/U9HmXR67GN
3- https://t.co/PUbM9KDPi6
4- https://t.co/Y2GynT7gWe
5- https://t.co/qC5jZg7xZh
6- https://t.co/A2jpdul6b3
#DFIR

[teambi0s @teambi0s]

Introducing MemLabs - Educational, CTF-styled labs for individuals interested in Memory Forensics, is now released.

Link: https://t.co/NoLu4Mu0tI

Author: @_abhiramkumar

#ctf #dfir #memoryforensics #infosec #cybersecurity

[Phill Moore @phillmoore]

Week 26 - 2020 #DFIR https://t.co/IjwrVGIltz

[Forensicator @Forensicator4]

@AlexisBrignoni I'll do my best! :)

[Forensicator @Forensicator4]

@_RyanBenson Thanks for the shout-out Ryan!

[marc ochsenmeier @ochsenmeier]

@SwiftOnSecurity @markrussinovich Nice new feature! For those who want a refresh about ADS, my slides:
https://t.co/KQVcZ2btn1

[Sarah Edwards 👩🏻‍💻🐈‍⬛ @iamevltwin]

#DFIR SQLite ProTip: Use Display Formats for db columns to triage data! (Right-click the column header) This makes me so happy, thank you @sqlitebrowser 😍

[Forensicator @Forensicator4]

New blog: Visualising Forensic Data with Pandas
https://t.co/RUDyf5Aym4

#DFIR #Python