iiinova — where your digital self keeps evolving

beercow.bsky.social @beercow.bsky.social · 04/09/2026

OneDrive now records volume id, drive letter, and volume name of removable devices. So much winning.

000

beercow.bsky.social @beercow.bsky.social · 20/08/2026

OneDriveExplorer is getting thumbnails in a future release!

000

beercow.bsky.social @beercow.bsky.social · 20/08/2026

OneDriveExplorer is getting thumbnails in a future release!

010

beercow.bsky.social @beercow.bsky.social · 20/08/2026

OneDriveExplorer is getting thumbnails in a future release!

000

beercow.bsky.social @beercow.bsky.social · 20/08/2026

OneDriveExplorer is getting thumbnails in a future release!

000

beercow.bsky.social @beercow.bsky.social · 20/08/2026

OneDriveExplorer is getting thumbnails in a future release!

000

beercow.bsky.social @beercow.bsky.social · 04/08/2026

Thumbnails started appetin OneDrive Databases.

000

beercow.bsky.social @beercow.bsky.social · 09/04/2026

Coming soon. How to build a combined Fuji recovery and WinFE drive. #DFIR

000

beercow.bsky.social @beercow.bsky.social · 07/04/2026

Coming soon. How to build a combined Fuji recovery and WinFE drive. #DFIR

001

beercow.bsky.social @beercow.bsky.social · 22/12/2025

When you get a group text and fix the name and picture for them.

010

beercow.bsky.social @beercow.bsky.social · 20/11/2025

When launching a program as admin, consent.exe runs with a parent process of svchost. If successful, consent.exe exits and the new process is launched with explorer as its parent. If not, we can’t always tell what was trying to be ran. Until now. github.com/Beercow/Cons...

021

beercow.bsky.social @beercow.bsky.social · 19/11/2025

Into the unknown and down rabbit holes we go.

000

beercow.bsky.social @beercow.bsky.social · 11/08/2025

Appears OneDrive snuck a new sync client in. Works with personal accounts at the moment. It’s WebView2. You can find data in the following locations: AppData\Local\Microsoft\OneDrive\OD4 AppData\Local\Microsoft\OneDrive\Logs\OD4 Where are my browser forensics experts at? #DFIR

001

beercow.bsky.social @beercow.bsky.social · 07/08/2025

Updated OneDrive Evolution. You can now compare two versions of OneDrive and see what has changed. #DFIR malwaremaloney.blogspot.com/p/onedrive-e...

000

beercow.bsky.social @beercow.bsky.social · 20/06/2025

Today we learned Fishrocket (the one with the doughnut) has cancer. It’s an aggressive form of mast cell tumors. Treatment usually involves removing them but there are too many. They prescribe prednisone because they itch. Has diabetes so can’t give him prednisone. Poor guy.