Top Tweets for #DFIRDUDES

about 7 years ago

How #DFIRDudes blog works? One of us finds something, tells about it and then we write something! This time @MartinKorman found out that WER files now include the crashed process hash!

Martin Korman @MartinKorman

about 7 years ago

New blog post by @hadar0x and me! Starting Windows 10, most of *.WER files include the process’ hash, which can be used for hunting in the same way that AmCache is being used. https://t.co/FOGMzdumf2 #dfir #computerforensics

Hadar Yudovich @hadar0x

almost 8 years ago

Working on a new blog post - some insights that we have about forensic challenges, after we have done the awesome DFIR CTF by @HECFBlog & @forensic_matt. We are also going to write a detailed walkthrough for every image! #DFIR #DFIRDUDES

Hadar Yudovich @hadar0x

almost 8 years ago

Decided to start a blog with @MartinKorman! We have a very original name for it #DFIRDUDES. We will try to write about DFIR, malware and security in general. Check out our first post (short one) about a new forensic artifact we found. https://t.co/kBqdpnBQOZ

Top Tweets for #DFIRDUDES

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users