iiinova — where your digital self keeps evolving

13Cubed @13cubed.bsky.social · 02/09/2026

A new 13Cubed episode is out! 🍎 Windows forensics on a Mac usually means firing up a VM first. Not anymore. IRFlow Timeline is a free, open-source DF/IR timeline tool built natively for macOS. www.youtube.com/watch?v=W9xH...

youtube.com

Windows Forensics on a Mac?! You Have to See This!

YouTube video by 13Cubed

000

13Cubed @13cubed.bsky.social · 10/08/2026

The first 13Cubed mini course, Architecting the Hunt, is now available! 🎉 An entry-level, hands-on introduction to threat hunting. Watch the launch video 👉 www.youtube.com/watch?v=cFxw... Enroll 👉 training.13cubed.com/architecting... #ThreatHunting #DFIR #BlueTeam

youtube.com

The Threat Hunting Course I Wish I Had

YouTube video by 13Cubed

011

13Cubed @13cubed.bsky.social · 20/07/2026

🔥 A new 13Cubed episode is out! In this episode, we'll look at a tool that can run multiple Volatility 3 plugins simultaneously, automating your memory analysis and saving you valuable time during investigations. 👉 Watch now: www.youtube.com/watch?v=0GMT... #DFIR

youtube.com

Automate Volatility 3 Memory Analysis with This Tool

YouTube video by 13Cubed

020

13Cubed @13cubed.bsky.social · 15/06/2026

🎉 A new 13Cubed episode is up! This time we're exploring the USN Journal on a live system. How can we view it while Windows is actively running, and does the reality match the common explanations? Let's find out! www.youtube.com/watch?v=eSLH... #DFIR #DigitalForensics

youtube.com

How the USN Journal Really Works

YouTube video by 13Cubed

011

13Cubed @13cubed.bsky.social · 08/06/2026

🍎 Happy #WWDC26 week! 🚀 We've just released a major update to Investigating macOS Endpoints, featuring an all-new hands-on macOS forensics scenario. 👉 www.youtube.com/watch?v=tRvw...

youtube.com

The Korvath Incident: A macOS Forensics Challenge

YouTube video by 13Cubed

000

13Cubed @13cubed.bsky.social · 01/06/2026

🎉 Today, we released a major update to Investigating Windows Endpoints, with significantly expanded content on registry forensics! 🔥 Next Monday is Apple's Worldwide Developers Conference (WWDC). Watch for another exciting update for Investigating macOS Endpoints! training.13cubed.com

training.13cubed.com

13Cubed

High quality, online, on-demand, and affordable digital forensics training courses from 13Cubed

000

13Cubed @13cubed.bsky.social · 02/05/2026

How about an unscheduled, impromptu Friday night 13Cubed episode? Let’s talk about Copy Fail. www.youtube.com/watch?v=ZVmp...

youtube.com

Hunting Copy Fail: 732 Bytes to Root

YouTube video by 13Cubed

031

13Cubed @13cubed.bsky.social · 21/04/2026

It's time for a new 13Cubed episode! I've got some thoughts about AI and digital forensics. Let's talk about it. www.youtube.com/watch?v=wKn-... #DFIR

youtube.com

The AI Conversation I've Been Avoiding

YouTube video by 13Cubed

000

13Cubed @13cubed.bsky.social · 18/03/2026

🎉 It’s time for a new 13Cubed episode! For macOS forensics, Fuji is a must-have. This episode is an excerpt from Investigating macOS Endpoints and covers the latest version, with major new changes. Let’s walk through a live acquisition! www.youtube.com/watch?v=9ZkL...

youtube.com

Mac Imaging Made Easy with Fuji

YouTube video by 13Cubed

023

13Cubed @13cubed.bsky.social · 17/02/2026

🎉 It's time for a new 13Cubed episode! Learn about another obscure Registry-based execution artifact. www.youtube.com/watch?v=yoFk... #DFIR

youtube.com

The Key to Switching Apps

YouTube video by 13Cubed

011

Reposted by 13Cubed

DFIR Diva @dfirdiva.bsky.social · 07/02/2026

📣 I partnered with @13cubed.bsky.social for a Valentine's Day Giveaway! 🎁 🏆1 Grand Prize winner will receive one course of their choice from the list below + a 13Cubed Investigator T-Shirt. 👕5 winners will receive a 13Cubed Investigator T-Shirt.

3128

13Cubed @13cubed.bsky.social · 20/01/2026

🚀 A new 13Cubed episode is up! Ever wondered how Windows Explorer really obtains file timestamps when you browse a directory of files? The answer might surprise you! www.youtube.com/watch?v=PdyV... #DFIR

youtube.com

The Truth About Windows Explorer Timestamps

YouTube video by 13Cubed

031

13Cubed @13cubed.bsky.social · 05/01/2026

🎉 Happy New Year! A major update is now live across multiple 13Cubed courses. Take a look at what’s new below 👇 www.youtube.com/watch?v=CzF6...

youtube.com

Major Update to 13Cubed Courses: Chaos at Cobalt

YouTube video by 13Cubed

001

13Cubed @13cubed.bsky.social · 01/12/2025

December is here, and so is a new 13Cubed episode! 🎉🎄 I went through your questions and had a lot of fun with this AMA/Q&A style video. www.youtube.com/watch?v=duz5... #DFIR

youtube.com

13Cubed AMA - Answering Your Questions!

YouTube video by 13Cubed

000

13Cubed @13cubed.bsky.social · 27/11/2025

🎄🎉 Our only sale of the year is now live through Tuesday! Use code BLACKFRIDAY2025 to save $100 on all courses and bundles. training.13cubed.com #DFIR

training.13cubed.com

13Cubed

High quality, online, on-demand, and affordable digital forensics training courses from 13Cubed

000

13Cubed @13cubed.bsky.social · 11/11/2025

Today we honor those who’ve served. 🎖️ 13Cubed proudly supports veterans year-round with a 10% discount through VetSec, plus 10% off for faculty, staff, and students. Reach out to info@13cubed.com or visit training.13cubed.com to learn more.

training.13cubed.com

13Cubed

High quality, online, on-demand, and affordable digital forensics training courses from 13Cubed

000

13Cubed @13cubed.bsky.social · 27/10/2025

🎃 Happy Halloween Week! It's time for a new 13Cubed episode. Let's look at a quick and easy way to find the Intermediate Symbol File (ISF) for your Linux memory image and speed up your analysis. www.youtube.com/watch?v=W40g... #DFIR #Linux #MemoryForensics

youtube.com

The Easy Way to Analyze Linux Memory

YouTube video by 13Cubed

010

13Cubed @13cubed.bsky.social · 09/09/2025

Happy 9/9! It's time for a new 13Cubed episode. 🎉 I'm sure you're as sick of hearing about AI as I am, but I have some thoughts... Let's talk about it. www.youtube.com/watch?v=lvkB... #DFIR

youtube.com

AI vs. Windows Forensics

YouTube video by 13Cubed

021

13Cubed @13cubed.bsky.social · 04/08/2025

🚨 A new 13Cubed episode is up! In this one, I sit down with @jbradley89 to talk about his upcoming book Threat Hunting macOS -- the perfect companion to our new “Investigating macOS Endpoints" course. www.youtube.com/watch?v=8Uj2...

youtube.com

Behind the Book: Threat Hunting macOS with Jaron Bradley

YouTube video by 13Cubed

100

13Cubed @13cubed.bsky.social · 14/07/2025

🛑✋ Well, that was fast! The contest is now closed, and all 5 winners have been selected and notified. Of course, the challenge will remain available and will hopefully serve as a great study resource for a long time to come.

000

13Cubed @13cubed.bsky.social · 14/07/2025

Happy summer! ☀️ Ready for a new 13Cubed memory forensics challenge? You could win an official 13Cubed challenge coin. 🎉 Check it out here! www.youtube.com/watch?v=6JN6... #DFIR

youtube.com

Windows Memory Forensics Challenge

YouTube video by 13Cubed

021

13Cubed @13cubed.bsky.social · 11/07/2025

This Monday, we’re dropping a new memory forensics challenge—this time focused on Windows! Like the last Linux one, you’ll have a chance to win a 13Cubed Challenge Coin. Subscribe at youtube.com/13cubed and click the 🔔 so you’re notified!

youtube.com

13Cubed

Digital Forensics. Hacking. Home Labs.

020

13Cubed @13cubed.bsky.social · 27/06/2025

We just issued our 500th 13Cubed certification! 🎉 Learn more at 13cubed.com/certs. All Windows, Linux, and macOS courses include certification attempts at no extra cost, allowing you to demonstrate real-world practical application of forensic investigative techniques. 🏅

010

13Cubed @13cubed.bsky.social · 10/06/2025

🎉 Big news! Investigating macOS Endpoints is now live—plus our new *NIX Bundle and XPlat Bundle Complete (all 13Cubed courses in one package). Thanks for patiently waiting! Dive in now 👉 training.13cubed.com #DFIR #macOS #Linux

training.13cubed.com

13Cubed

High quality, online, on-demand, and affordable digital forensics training courses from 13Cubed

030

13Cubed @13cubed.bsky.social · 23/05/2025

🎉 It’s time for a new 13Cubed episode! We’ll briefly explore how process hollowing works and check out the relatively new windows.hollowprocesses plugin for Volatility 3. There are also two memory samples you can download for practice! www.youtube.com/watch?v=x5mG... #DFIR

youtube.com

A New(ish) Way to Detect Process Hollowing

YouTube video by 13Cubed

044

13Cubed @13cubed.bsky.social · 02/05/2025

🎉 Happy Friday! Two quick updates: Investigating macOS Endpoints and related bundles are now open for waitlisting! 👉 13cubed.com 13Cubed Merch Store is LIVE with fresh designs and premium shirts! 👉 shop.13cubed.com

shop.13cubed.com

13Cubed

Official 13Cubed merch.

000

13Cubed @13cubed.bsky.social · 14/04/2025

It's time for a new 13Cubed episode! 🎉 This is a small excerpt from one of the lessons in the upcoming "Investigating macOS Endpoints" course. Look for the course release this summer! www.youtube.com/watch?v=9bEi... #DFIR #macOS

youtube.com

Getting Started with Fuji - The Logical Choice for Mac Imaging

YouTube video by 13Cubed

010

13Cubed @13cubed.bsky.social · 24/02/2025

It's time for a new 13Cubed episode covering a very obscure evidence of execution artifact. www.youtube.com/watch?v=edJa... Enjoy! #DFIR

youtube.com

RADAR Contact! An Obscure Evidence of Execution Artifact

YouTube video by 13Cubed

031

13Cubed @13cubed.bsky.social · 06/01/2025

Happy New Year! 🎉🥳 The first 13Cubed episode of 2025 is here! Let's explore some groundbreaking research from CyberCX on “rewinding the NTFS USN Journal.” www.youtube.com/watch?v=GDc8... #DFIR

youtube.com

Be Kind, Rewind... The USN Journal

YouTube video by 13Cubed

0113

13Cubed @13cubed.bsky.social · 13/12/2024

Happy Friday the 13th! 🎉 We’re thrilled to share that our next 13Cubed course—Investigating macOS Endpoints—is officially in the works. This highly requested training is now our top priority, with a target launch by mid-2025. We'll keep you updated along the way! #DFIR

091

13Cubed @13cubed.bsky.social · 02/12/2024

Happy Cyber Monday! 🎉 A brand-new 13Cubed episode on NTFS FILE record reuse is out now. Dive into the details and don’t forget—today’s the final day to save 13% on all 13Cubed training courses with code BLACKFRIDAY2024. Ends at 00:00 UTC Dec 3. www.youtube.com/watch?v=6LpJ... #DFIR

youtube.com

NTFS FILE Record Reuse

YouTube video by 13Cubed

0145

13Cubed @13cubed.bsky.social · 28/11/2024

🎉🦃 The 13Cubed Black Friday sale is now live through Monday. Use coupon code BLACKFRIDAY2024 to save 13% -- our biggest promotion of the year. #DFIR

050

13Cubed @13cubed.bsky.social · 22/11/2024

🎉🦃 Our annual Black Friday sale starts Friday, November 29, and runs through Monday, December 2. All courses and bundles will be 13% off for individual purchases. Standard bulk discount rates apply. #DFIR

081