Want to stress this: Officials are specifically instructed NOT to whistle fumbles dead if there's any doubt. They've reversed two touchdowns.

Patrick. Peterson. #skol

Hey all, I know a #DFIR examiner who is seeking a new opportunity. 7+ years experience in finding truth in data. Please DM if you know of a possible fit. This is an awesome candidate! #DFIR Jobs

#DFIR thebinaryhick.blog/2022/10/29/tha…

Very solid keynote on things to be on the lookout for in your #dfir career. Thanks so much Rob T. Lee for the amazing words of wisdom. #findyourchad

When in Vegas

Let’s talk about Shim Cache - a great overview by 13Cubed
youtu.be/7byz1dR_CLg

Over the last few months, Digital Forensics Discord Server members collaborated on a DFIR book. Today version 1.0 is published, with more content to come as chapters are completed in the future! It's free on Leanpub, so check it out in the following tweet!

I’m gonna go take a nap now…. #dfirfit

My SANS Gold Paper is finally live! Check it out!

giac.org/research-paper…

There are 19 new #DFIR #CTF Scenarios at #DigitalCorpora , thanks to MagnetForensics Jessica Hyde David Cowen Matt Seyer, Jack Farley Jordan Kimball, Garrett Mahoney, Dylan Navarro, Alayna Cash and Hayley Froio.

downloads.digitalcorpora.org/corpora/scenar…

'Security is hard': parks and rec edition -

Pyramid of Pain is the way it is for a reason…

Join Kroll Andrew Rathbun for an upcoming webinar as he demonstrates how to use Kroll Artifact Parser and Extractor ( #KAPE ) to detect #timestomping .

Register here: bit.ly/3MQCou7

#DFIR #cyberattack #incidentresponse #incidentinvestigation

Seeing concerns on iOS16 and new features 4 iMessage. I have not read yet suggestions for #DFIR folks to remind entities, that tools *MAY* need time to catch up to new updates. Don’t bet the farm vendors will already have figured out the artifacts before you get the first one!

Very awesome! Love seeing things like this being created. Great work, Aaron!

I am both excited and honored to give this talk. See you all in Austin!

Can’t wait!!

Hey all! My new book,
Ransomware: Understand. Prevent. Recover.

Will be live on Monday in Kindle and Paperback versions! Apologies to everyone who pre-ordered the first time and had the orders cancelled, but this is actually happening!

smile.amazon.com/Ransomware-Und…

Solid research