dfir 10

• Speaking at NCCC 2024 Apr 17, 2024
• Memory Forensics – RansomCare Investigation Case 1 May 22, 2023
• Challenge #9 – Encrypt Them All Case Mar 27, 2023
• Challenge #8 – NTFS File System Case Mar 27, 2023
• Challenge #7 – SysInternals Case Mar 27, 2023
• Investigating USB Drives using Mount Points Not Drive Letters Apr 4, 2020
• No Drive Letter, No USB Evidence? Think Again! Apr 3, 2020
• Howto Setup and use the CuckooVM v2 Mar 18, 2020
• Investigating Windows Systems (Book Review) Jan 1, 2020
• Forensic Acquisitions over Netcat Jun 4, 2019