Sign in

Kat Hedley

@4enzikat0r.bsky.social
176 followers 132 following 17 posts

DFIR, SANS author & certified instructor GSP & all the FOR GIACs khyrenz.com github.com/khyrenz

PostsRepliesMedia
Kat Hedley @4enzikat0r.bsky.social · 06/01/2025
My goal for the holiday period was to finish @nintendouki.bsky.social #MarioVsDonkeyKong Goal accomplished on New Years Day 😎
050
Kat Hedley @4enzikat0r.bsky.social · 04/01/2025
Best news ever! Free #AppleTV this weekend That’s my weekend sorted 👍 www.apple.com/tv-pr/news/2...
apple.com
Enjoy Apple TV+ for free the first weekend of 2025
Apple TV+ is ringing in the New Year by offering an all-access pass to customers all around the world.
010
Kat Hedley @4enzikat0r.bsky.social · 01/01/2025
Me: i’m going to start the year as I mean to go on, with a 2km #DFIRFit run on the treadmill 💪 My treadmill 2mins into the warm up… Anyone know how to fix a dead @nordictrack.bsky.social S20 (UK)? 🤦‍♀️ It’s not the fuse & I yes I already tried turning it off & on again!
120
Kat Hedley @4enzikat0r.bsky.social · 11/12/2024
Version 1.6 of #DFIR #parseUSBs is out… I was interested to see if I could fill in any gaps in assigned drive letters for previous USB connections using LNK data, so this version does exactly that (matching on VSN) As always, feedback very welcome github.com/khyrenz/pars...
github.com
GitHub - khyrenz/parseusbs: Parses USB connection artifacts from offline Registry hives
Parses USB connection artifacts from offline Registry hives - khyrenz/parseusbs
184
Kat Hedley @4enzikat0r.bsky.social · 10/12/2024
I got as far as I could on the badge challenges on day1 of @SANSInstitute #CyberThreat24 … tripped up by a micro USB cable 🤦‍♀️🤣
120
Kat Hedley @4enzikat0r.bsky.social · 09/12/2024
It’s all kicking off in style at @SANSInstitute #CyberThreat
010
Kat Hedley @4enzikat0r.bsky.social · 01/12/2024
Very important development… the @trafficscotland gritter tracker now has a beta 3D map! Best names ever, every year Go Icesweeper Willie, go! Though I still think the best name so far is… Itsy Bitsy Teenie Weenie Yellow Anti-Slip Machiney www.traffic.gov.scot/gritter-trac...
traffic.gov.scot
Gritter tracker | Traffic Scotland
Traffic Scotland gives you the real-time information you need about Scotland’s trunk road network
011
Reposted by Kat Hedley
Ars Technica @arstechnica.com · 29/11/2024
arstechnica.com
Code found online exploits LogoFAIL to install Bootkitty Linux backdoor
Unearthed sample likely works against Linux devices from Acer, HP, Fujitsu, and Lenovo.
27220
Kat Hedley @4enzikat0r.bsky.social · 26/11/2024
How do #InfoSec social media apps compare? Stats on my last #DFIR post after 24hrs… X: - 5 reposts - 26 likes - 2 new followers Mastodon: - 2 boosts - 3 favourites - 2 followers Bluesky: - 6 reposts - 16 likes - 7 followers LinkedIn: - 13 reposts - 79 reactions - 7 followers - 25 conn requests
4120
Kat Hedley @4enzikat0r.bsky.social · 25/11/2024
🚨 #DFIR Tool update 🚨 I’ve updated parseUSBs (again!): - Now supports mounted #KAPE images - Improved deduplication of events within secs of each other - Added extraction of partition style (MBR/GPT) & Filesystem - Parses alternate S/Ns - Parses WPDBUSENUM key github.com/khyrenz/pars...
github.com
GitHub - khyrenz/parseusbs: Parses USB connection artifacts from offline Registry hives
Parses USB connection artifacts from offline Registry hives - khyrenz/parseusbs
12810
Reposted by Kat Hedley
The Intercept @theintercept.com · 01/06/2023
Who owns Bluesky? What’s the role of former Twitter CEO Jack Dorsey? What’s Bluesky’s business model? And what prevents another Elon Musk from buying and destroying it?  @micahflee.com answers your Bluesky questions.
theintercept.com
Is Bluesky Billionaire-Proof?
Questions and answers about the new social media network Bluesky that you don’t need an invite to see. First, Jack Dorsey is not an owner.
2178
Reposted by Kat Hedley
D:\unk.osint @thetechhouse.bsky.social · 19/11/2024
Interesting and potentially problematic from a LE viewpoint - @tazwake.bsky.social did you know about this? naehrdine.blogspot.com/2024/11/reve...
naehrdine.blogspot.com
Reverse Engineering iOS 18 Inactivity Reboot
Wireless and firmware hacking, PhD life, Technology
333
Reposted by Kat Hedley
Warcop @warcop.com · 18/11/2024
18211
Kat Hedley @4enzikat0r.bsky.social · 18/11/2024
My #parseusbs #DFIR tool got another small update this week to fix an issue on Linux - now tested on Windows cmd/powershell, WSL (the best shell!), and Ubuntu Parse USB connection artifacts from a Windows volume, including registry & event log data (or offline hives) github.com/khyrenz/pars...
github.com
GitHub - khyrenz/parseusbs: Parses USB connection artifacts from offline Registry hives
Parses USB connection artifacts from offline Registry hives - khyrenz/parseusbs
0114
Kat Hedley @4enzikat0r.bsky.social · 18/11/2024
Join me in Lisbon next week for lots of @sansforensics #FOR500 Windows forensics fun. I’ve discovered some fun new things about USB connection artifacts that I’ll be sharing first at this event, so you’ll want to be around for all that! Sign up here: sans.org/u/1yrB
071
Reposted by Kat Hedley
Chris DiSalle @chrisdfir.updatex64.zip · 17/11/2024
This git is full of resources for event logs/auditing. Covers everything from tool configs to audit cheatsheets to event attack chains and data samples. In #DFIR visibility is key. This is a solid resource for those responding to an incident or trying to prevent one. #grc github.com/stuhli/aweso...
github.com
GitHub - stuhli/awesome-event-ids: Collection of Event ID ressources useful for Digital Forensics and Incident Response
Collection of Event ID ressources useful for Digital Forensics and Incident Response - stuhli/awesome-event-ids
0136