Forensic Artifacts (@4n6artifacts) profile picture

Forensic Artifacts

@4n6artifacts

Twitter presence and update feed for http://t.co/1FT7s3IMgh.

forensicartifacts.com
Joined July 2010
  • Tweets176
  • Following4
  • Followers1.4K
Great slides on Rekall and Grr, dfrws.org/sites/default/file…
6
Just got a Coin for my #mac4n6 artifacts contribution, thanks @robtlee @j3ssgarcia @4n6artifacts #DFIRPrague
Image from Pasquale Stirparo 🌻🇺🇦 (@pstirparo)
3
4
Mac OS X User Preference Settings bit.ly/1LpkC99 #DFIR
1
2
Mac OS X: iOS device backup locations bit.ly/1LoiWfX #DFIR
6
5
Mac OS X “Recent Items” bit.ly/1Q8zyNg #DFIR
4
7
Mac OS X System Logs bit.ly/1Zd06Tz #DFIR
5
6
Mac OS X Sleep/Hibernate and Swap Image File bit.ly/1jO9AEq #DFIR
5
6
#mac4n6 artifacts library updated: now 142 artifacts location + yaml library for tool integration.Check it out github.com/pstirparo/mac4n6 #DFIR
GitHub - pstirparo/mac4n6: Collection of forensics artifacts location for Mac OS X and iOS

GitHub - pstirparo/mac4n6: Collection of forensics artifacts location for Mac OS X and iOS

Collection of forensics artifacts location for Mac OS X and iOS - pstirparo/mac4n6

github.com
1
15
7
Mac OS X Autorun Locations bit.ly/1TLsjR2 #DFIR
4
19
Forensic Artifacts retweeted
Brent Muir (@bsmuir) profile picture
Brent Muir@bsmuir28 Jul 2015
On the eve of #Windows10 here's one for the #DFIR analysts; I put together a guide on the OS artefacts. #forensics goo.gl/zpNSvE
1
24
27
Dissecting VLC – Windows 7 x32 bit.ly/1SgeBla #DFIR
1
7
4
Forensic Artifacts retweeted
Chris Shanahan (@cshanahan) profile picture
Chris Shanahan
@cshanahan9 Jun 2015
Replying to @SUMURIForensics
@SumuriLLC giving away new Paladin CDs, now Cellebrite training. And for free. Not making any money. Instead, just trying to help LEO. #DFIR
1
1
1
Forensic Artifacts retweeted
Chris Shanahan (@cshanahan) profile picture
Chris Shanahan
@cshanahan9 Jun 2015
I'd like to see Steve Whalen @SumuriLLC get some more credit. As a small company, few do more for the #DFIR community, especially LEO.
1
1
Forensic Artifacts retweeted
James Habben (@JamesHabben) profile picture
James Habben@JamesHabben16 Apr 2015
evolve | web interface for @volatility. Code is now on GitHub. #DFIR #InfoSec github.com/JamesHabben/evolv…
Image from James Habben (@JamesHabben)
Image from James Habben (@JamesHabben)
1
86
96
Forensic Artifacts retweeted
Mari Degrazia (@maridegrazia) profile picture
Mari Degrazia@maridegrazia4 Mar 2015
Finally, got around to a new blog post - USN Journal: Where have you been all my life az4n6.blogspot.com/2015/03/u… #dfir
Image from Mari Degrazia (@maridegrazia)
3
25
25
Forensic Artifacts retweeted
woanware (@woanware) profile picture
woanware@woanware23 Feb 2015
Initial update on the Mandiant shimcache parser for Win 10: github.com/woanware/ShimCach…
5
5
Forensic Artifacts retweeted
David Cowen (@HECFBlog) profile picture
David Cowen
@HECFBlog23 Feb 2015
For those of you following the automating #dfir series I have my list of things to show up to 24 parts, what do you want to see?
5
2
4
Forensic Artifacts retweeted
Eric Zimmerman (@EricRZimmerman) profile picture
Eric Zimmerman
@EricRZimmerman11 Feb 2015
Introducing Registry Explorer: Multi hive support, recover deleted k/v, dynamic bookmarks, hide keys, and more! goo.gl/FFOQLO #DFIR
3
42
33
Forensic Artifacts retweeted
Eric Zimmerman (@EricRZimmerman) profile picture
Eric Zimmerman
@EricRZimmerman5 Feb 2015
Hey #DFIR tweet your favorite Registry keys, like this: usrclass.dat/Local Settings\Software\Microsoft\Windows\Shell\BagMRU Thanks!
4
2
1
Forensic Artifacts retweeted
Greg Castle (@mrgcastle) profile picture
Greg Castle@mrgcastle9 Nov 2014
"GRR: Find all the badness, collect all the things" talk. Register to watch here: concise-courses.com/infosec/… @conciseonline #DFIR
2
5
Load more