JK Kim

DFIR, cyber warfare, digital profiling,
CEO & Founder PLAINBIT Co., Ltd.

[JK Kim @pr0neer]

Malicious PyPI packages that steal cryptocurrency wallet information, https://t.co/m4F3vPHt5q

[JK Kim @pr0neer]

The 6th Digital Forensics Challenge (DFC) has begun. #DFC #DFC2023 https://t.co/tsnWigRNFB

[JK Kim @pr0neer]

DFC2022 has started this year as well. Let's go solve the problem! https://t.co/tsnWigRNFB

[JK Kim @pr0neer]

DFC(Digital Forensics Challenge)2021 started. Great experience, valuable time and improvement of my level https://t.co/tsnWigzErt #DFC2021

[JK Kim @pr0neer]

@Forensicator4 Hi, Forensicator,

I watched your DFC 2020 write-up well. However, since DFC 2020 is currently in progress, evaluation is getting difficult with the write-up you posted. If possible, post a write-up after the competition.

[JK Kim @pr0neer]

The ranking of the @DFC2020 challenge has been updated. https://t.co/DEVuYeBxVv

[JK Kim @pr0neer]

Digital Forensics Challenge 2020 is finally OPEN! https://t.co/tsnWigzErt #DFC2020

[JK Kim @pr0neer]

Which dForensic tools are used by professionals? https://t.co/nPK20qJ5yy

[JK Kim @pr0neer]

Check the following registry key for the folder id of Windows Timeline.
NTUSER.DAT\Software\Microsoft\Office\<version>\Common\Identity\Identities

[JK Kim @pr0neer]

@binaryz0ne @EricRZimmerman I'm always using that combination too. But sometimes I need a UI for winprefetchview.

[JK Kim @pr0neer]

Why does winprefetchview still parse format version 26? Please update to support Windows 10 (format version 30). PECmd is great, but it's hard to lose the GUI's comfort. https://t.co/Zqrs4g9a4z

[JK Kim @pr0neer]

The boot prefetch is no longer visible in Windows 10. It seems to be the effect of fast startup. Now let's look at bootckcl.etl.

[JK Kim @pr0neer]

@binaryz0ne Windows 10 Pro ver 1903!

[JK Kim @pr0neer]

The Superfetch service is no longer visible. This service has been replaced by SysMain. The EnablePrefetcher registry value is no longer meaningful.

[JK Kim @pr0neer]

TaskForce vs. TX1 vs. Forensic Falcon, What would you choose? https://t.co/rVXKMtUtQ0

[JK Kim @pr0neer]

Introduction to Atola TaskForce, https://t.co/cpgUteiNd5

[JK Kim @pr0neer]

DFC 2019's Ranking updated, https://t.co/viGT6TprGm

[JK Kim @pr0neer]

DFC 2019's Ranking updated - 45 days left, https://t.co/viGT6TprGm

[JK Kim @pr0neer]

DFC2019 Ranking Updated, https://t.co/viGT6TprGm

[JK Kim @pr0neer]

Using MITRE ATT&CK for Forensics: WMI Event Subscription (T1084), https://t.co/uTzEnvP7AW