iiinova — where your digital self keeps evolving

Reposted by DFIR Diva

Volatility @volatilityfoundation.org · 21/09/2026

Volatility New Release: #volatility3 v2.28.2 - visit github.com/volatilityfo... for details and downloads. #memoryforensics #dfir

022

Reposted by DFIR Diva

My OSINT Training (MOT) @myosint.training · 25/09/2026

Our new 𝗠𝗮𝘀𝘁𝗲𝗿𝗶𝗻𝗴 𝗦𝗲𝗮𝗿𝗰𝗵 𝗘𝗻𝗴𝗶𝗻𝗲𝘀 course is live! Most of us only use a fraction of what search engines actually offer. 𝗧𝗵𝗶s #OSINT course is about analysis and methodology (and operators). Start making search engines work for you. @webbreacher.com @hatless1der.com

022

DFIR Diva @dfirdiva.bsky.social · 02/08/2026

Congrats to the winners of the @13cubed.bsky.social Summer Giveaway! 🎉 Ricky Valentin: Investigating Windows Endpoints Tate Pannam: Investigating macOS Endpoints Moaz Hossam: Investigating Linux Devices theAtropos4n6: Investigating Linux Devices Monk_VJ: Investigating Linux Devices

121

DFIR Diva @dfirdiva.bsky.social · 18/07/2026

📣 I partnered with @13cubed.bsky.social for a summer giveaway! 🎁 🏆 Five winners will receive a 13Cubed course of their choice + a Forensicator T-Shirt. 13Cubed Courses: - Investigating Windows Endpoints - Investigating Windows Memory - Investigating Linux Devices - Investigating macOS Endpoints

554

DFIR Diva @dfirdiva.bsky.social · 26/04/2026

🎉 Congrats to the winners! 🏆 Calvin Kyle C. - Investigating macOS Endpoints Jaspher S. - Investigating macOS Endpoints Pir00t - Investigating macOS Endpoints ComandanteBowie - Investigating Linux Devices @spiffysec.bsky.social - Investigating Windows Memory I'll be reaching out to you shortly.

150

DFIR Diva @dfirdiva.bsky.social · 11/04/2026

📣 I partnered with @13cubed.bsky.social for another giveaway! 🎁 🏆 Five winners will receive a 13Cubed course of their choice + a Forensicator T-Shirt. 13Cubed Courses: - Investigating Windows Endpoints - Investigating Windows Memory - Investigating Linux Devices - Investigating macOS Endpoints

795

DFIR Diva @dfirdiva.bsky.social · 15/02/2026

Congrats to the winners of the @13cubed.bsky.social Valentine's Day Giveaway! 🎉 🏆 geekypanda411 - T-Shirt and Investigating macOS Endpoints course 👕 bmmaloney97 - T-Shirt 👕 Brian Randel M. - T-Shirt 👕 Viktor S. - T-Shirt 👕 Amr Khaled - T-Shirt 👕 Roberto Orozco - T-Shirt

031

DFIR Diva @dfirdiva.bsky.social · 07/02/2026

📣 I partnered with @13cubed.bsky.social for a Valentine's Day Giveaway! 🎁 🏆1 Grand Prize winner will receive one course of their choice from the list below + a 13Cubed Investigator T-Shirt. 👕5 winners will receive a 13Cubed Investigator T-Shirt.

3128

DFIR Diva @dfirdiva.bsky.social · 01/12/2025

📢 I partnered with @13cubed.bsky.social for another giveaway! 🎁 🏆 1 winner will receive a 13Cubed Investigator T-Shirt + the XPlat Bundle Complete 👕 5 winners will receive 13Cubed Investigator T-Shirts To Enter: Like, Comment, and Repost #DFIR #DigitalForensics #IncidentResponse

9108

DFIR Diva @dfirdiva.bsky.social · 10/08/2025

Hack The Box is hosting their first all Blue CTF next month! Dates: September 22nd - 26th Form a team and compete for prizes 🏆 Challenges Include: - DFIR - SOC - Malware Reversing - Threat Intelligence Link: ctf.hackthebox.com/event/detail...

040

Reposted by DFIR Diva

Doug Metz @dwmetz.bsky.social · 28/04/2025

I recorded a brief video, walking through some of the different functions in MalChela in the new GUI, stepping through basic static analysis to yara rule writing - all in minutes.  youtu.be/hI1EqojI1DA #DFIR #MalwareAnalysis #YARA #MITRE #Rust MalChela: github.com/dwmetz/MalCh...

youtu.be

MalChela GUI Walk through

YouTube video by Doug Metz

133

Reposted by DFIR Diva

Josh Lemon @joshlemon.bsky.social · 28/04/2025

This is an interesting write up on a slightly different #Docker #container #malware attack from the Cado Security and Darktrace teams. 🔗 www.darktrace.com/blog/obfusca...

122

Reposted by DFIR Diva

CYBER 5W @cyber5w.bsky.social · 04/04/2025

Interested in learning about #DFIR and don't know where to start? Then we highly recommend you check out our full "C5W-100 - Introduction to Digital Forensics" course. It is completely FREE and it should help you get started. #infosec #cybersecurity academy.cyber5w.com/courses/C5W-...

academy.cyber5w.com

C5W-100 INTRODUCTION TO DIGITAL FORENSICS

053

Reposted by DFIR Diva

SLEUTHCON @sleuthcon.bsky.social · 18/03/2025

🐍 SLEUTHCON is coming! 🐍 Registration and CFP are now open for this year’s SLEUTHCON—happening June 6th, both in-person in Arlington, VA, and virtually. www.sleuthcon.com 1/x

4128

Reposted by DFIR Diva

Ryan Benson @hindsig.ht · 11/03/2025

There's a new Hindsight release! Hindsight v2025.03 focuses on Extensions - parsing more activity and state records, highlighting Extension permissions, and making it easier to examine Manifests. 🌐 Blog: dfir.blog/hindsight-pa... 🛠️ Tool download: hindsig.ht/release #DFIR #Chrome #Extensions

dfir.blog

Hindsight v2025.03 Released!

Hindsight v2025.03 focuses on Extensions - parsing more activity and state records, highlighting Extension permissions, and making it easier to examine Manifests.

084

Reposted by DFIR Diva

Brian Carrier @carrier4n6.bsky.social · 11/03/2025

New Autopsy release is out! 🎉 It's been a minute, but it's out. Notable features are BitLocker support and it can run side-by-side with Cyber Triage. Plus, a bunch of library updates. Now Cyber Triage and Autopsy can be used on the same case at the same time! www.autopsy.com/autopsy-4-22...

autopsy.com

Autopsy - Autopsy 4.22.0: BitLocker Support, Cyber Triage Sidecar, Library Updates

Autopsy 4.22.0 includes BitLocker support, ability to run alongside Cyber Triage, and updates to lower-level libraries.

01910

DFIR Diva @dfirdiva.bsky.social · 10/03/2025

New Blog Post! Free & Affordable Training News Monthly: Feb - Mar 2025 - Newly released DFIR, OSINT, and Malware Analysis training, tools, and books from February 2025 - Upcoming events for March 2025 Link: dfirdiva.com/free-afforda... #DFIR #IncidentResponse #MalwareAnalysis #OSINT

dfirdiva.com

Free & Affordable Training News Monthly: Feb - Mar 2025

Newly released Digital Forensics, Incident Response, Malware Analysis and OSINT training, tools, and books from February 2025. Upcoming events for March.

011

Reposted by DFIR Diva

Jessica Hyde @b1n2h3x.bsky.social · 18/02/2025

Missed the @magnetforensics.bsky.social Virtual Summit #CTF but want the images for testing and learning? We have already shared them with @nist.bsky.social CFReDS cfreds.nist.gov/all/Hexordia...

cfreds.nist.gov

CFReDS Portal

0106

Reposted by DFIR Diva

Kevin 🤖🕵️🍺 @stark4n6.bsky.social · 17/02/2025

New #iLEAPP 2.1.0 release is out! #DFIR github.com/abrignoni/iL...

031

DFIR Diva @dfirdiva.bsky.social · 08/02/2025

Ultimate Cybersecurity Career Humble Bundle! Includes: - Incident Response for Windows - The OSINT Handbook - Effective Threat Investigation for SOC Analysts and more! Link: humblebundleinc.sjv.io/kOaeod (Partner Link) #DFIR #IncidentResponse #MalwareAnalysis #Cybersecurity #OSINT

humblebundleinc.sjv.io

Humble Tech Book Bundle: Ultimate Cybersecurity Career by Packt

Jump-start your exciting new cybersecurity career with this outstanding library of tech courses. Pay what you want & support World Central Kitchen!

053

DFIR Diva @dfirdiva.bsky.social · 08/02/2025

DFIR Giveaway! You could win: ✅A FREE @detegoglobal.bsky.social Digital Forensics & Cyber Crime Investigations course worth $399 each ✅Detego merch pack ✅‘Force of Justus’ crime novel Enter here: detegoglobal.com/dfirdiva THREE winners will be announced March 10th, 2025! #DFIR

051

DFIR Diva @dfirdiva.bsky.social · 03/02/2025

Free & Affordable Training News Monthly: Dec 2024 - Feb 2025 - Newly released DFIR, OSINT, and Malware Analysis training, tools, and books from Dec 2024 & Jan 2025 - Upcoming CTFs and training for February, 2025 Link: dfirdiva.com/free-amp-aff... #DFIR #IncidentResponse #MalwareAnalysis #OSINT

082

DFIR Diva @dfirdiva.bsky.social · 01/01/2025

Happy New Year! I partnered with @13cubed.bsky.social for a giveaway of his XPlat training/certification Bundle! To Enter: Like, Repost, and Leave a Comment On January 12th, 1 winner will be chosen from LinkedIn and 1 winner will be chosen from Bluesky. #DFIR #DigitalForensics #IncidentResponse

323731

Reposted by DFIR Diva

Kirbstr @kirbstr.bsky.social · 17/12/2024

PSST: our 1-day OSINT 101 (for beginners) class is free! academy.plessas.net/offers/iFJiA...

academy.plessas.net

Plessas Experts Network - Online Learning Portal

294

Reposted by DFIR Diva

Kirbstr @kirbstr.bsky.social · 12/12/2024

I have 76 feeds in this list. Next week I will add more podcasts, but if I am missing important blogs (and I KNOW I am), give me a hand. Don't be shy - post your own blogs too. #OSINT knowledgebase.plessas.net/OSINT-Feeds-...

0103

Reposted by DFIR Diva

beercow.bsky.social @beercow.bsky.social · 06/12/2024

Just a heads up. M$ is OCRing all your images in OneDrive for business in an unsecured database on your desktop/laptop. Happy Friday. #DFIR

2167

Reposted by DFIR Diva

Sinwindie @sin.osintdojo.com · 07/12/2024

We uploaded a new #OSINT challenge for you to try your hand at. Can you identify the Latitude and Longitude of where this photo was taken? www.youtube.com/shorts/6iYuE...

youtube.com

#OSINT Challenge: Blue City Sign

YouTube video by OSINT Dojo

4195

Reposted by DFIR Diva

Dmitry Vostokov @dumpanalysis.bsky.social · 05/12/2024

Accelerated Rust Windows Memory Dump Analysis (ISBN-13: 978-1912636891) is now available in PDF format with and without recording and additional materials: www.patterndiagnostics.com/accelerated-...

064

Reposted by DFIR Diva

Magnet Forensics @magnetforensics.bsky.social · 04/12/2024

Want to take part in the Magnet Virtual Summit #CaptureTheFlag competition? Let @b1n2h3x.bsky.social share some helpful info, including what's new (like the ability to play in teams), how to take part, and where to get some tips & tricks: ow.ly/mHW350UkTXe #MVS2025 #CTF #DFIR

ow.ly

Magnet Virtual Summit 2025 Capture the Flag - Magnet Forensics

Join the MVS Capture The Flag for a gamified digital forensics challenge! Compete solo or in a team, win prizes.

062

Reposted by DFIR Diva

Brad @malware-traffic-analysis.net · 05/12/2024

2024-12-04 (Wednesday): #AgentTesla variant using #FTP for data exfiltration. A sanitized copy of the email distributing the malware, a #pcap from an infection run, the associated malware samples, and a list of indicators are available at www.malware-traffic-analysis.net/2024/12/04/i...

Screenshot of the email showing a TAR archive as an email attachment.

The TAR archive and its content, a Windows EXE file for AgentTesla

An update to the Windows registry showing the malware persistent on an infected Windows host.

Traffic from an infection filtered in Wireshark to show the FTP data exfiltration traffic.

174

Reposted by DFIR Diva

Ali Hadi | B!n@ry @binaryz0ne.bsky.social · 04/12/2024

Come join us tomorrow #DFIR

161

Reposted by DFIR Diva

MrOSINT @mrosint.bsky.social · 02/12/2024

Go back to the basics when leveraging OSINT for your investigations. Google Dorking is a great example. Using search operators can greatly reduce the number of search results while increasing accuracy. Site:bsky.app Privacy Privacy policy from Bluesky. Wanna try more Osmosis.ctfd.io check it out!

osmosis.ctfd.io

Osmosis Association's 25 Days of OSINT CTF

052

Reposted by DFIR Diva

Tristan Jenkinson @tristanjenkinson.bsky.social · 02/12/2024

Really pleased to complete the five Bellingcat open source puzzles on day one. If you want to play along, you can join in at challenge.bellingcat.com Enjoy! #Bellingcat #OSINT #Investigations #Geolocation

challenge.bellingcat.com

Bellingcat Open Source Challenge

021

Reposted by DFIR Diva

Jessica Hyde @b1n2h3x.bsky.social · 02/12/2024

#DFIR 💭 of the day: Collaboration between practitioners and academia is crucial. To get ahead of rapid changes in #DFIR, we need scientific study and research! This is the largest scientific survey of DFIR practitioners. Must read to understand current issues www.sciencedirect.com/science/arti...

sciencedirect.com

DFPulse: The 2024 digital forensic practitioner survey

This paper reports on the largest survey of digital forensic practitioners to date (DFPulse) conducted from March to May 2024 resulting in 122 respons…

0123

Reposted by DFIR Diva

Tanya Janca | SheHacksPurple @shehackspurple.bsky.social · 02/12/2024

It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect!

0115

Reposted by DFIR Diva

Layer 8 Conference and Podcast @layer8conference.com · 02/12/2024

The Layer 8 Conference is back! Saturday, June 14 in Boston! More info here: layer8conference.com Hope to see you there! #OSINT #SocialEngineering

layer8conference.com

Layer 8 Conference – Social Engineering and Intelligence Gathering – Boston, MA

097

Reposted by DFIR Diva

13Cubed @13cubed.bsky.social · 02/12/2024

Happy Cyber Monday! 🎉 A brand-new 13Cubed episode on NTFS FILE record reuse is out now. Dive into the details and don’t forget—today’s the final day to save 13% on all 13Cubed training courses with code BLACKFRIDAY2024. Ends at 00:00 UTC Dec 3. www.youtube.com/watch?v=6LpJ... #DFIR

youtube.com

NTFS FILE Record Reuse

YouTube video by 13Cubed

0145

Reposted by DFIR Diva

The DFIR Report @thedfirreport.bsky.social · 02/12/2024

🌟New report out today!🌟 The Curious Case of an Egg-Cellent Resume Analysis & reporting completed by @_pete_0, @svch0st and guest contributor @k3dg3 from @proofpoint! Audio: Available on Spotify, Apple, YouTube and more! thedfirreport.com/2024/12/02/t...

thedfirreport.com

The Curious Case of an Egg-Cellent Resume

Key Takeaways Initial access was via a resume lure as part of a TA4557/FIN6 campaign. The threat actor abused LOLbins like ie4uinit.exe and msxsl.exe to run the more_eggs malware. Cobalt Strike and…

0266

Reposted by DFIR Diva

Brad @malware-traffic-analysis.net · 28/11/2024

2024-11-26 (Tuesday): Finally got another traffic analysis exercise out! You have a #pcap and alerts on the network traffic. You're asked to write an incident report. Join the fun at www.malware-traffic-analysis.net/2024/11/26/i... #Wireshark #TrafficAnalysisExercise

152

Reposted by DFIR Diva

Benjamin Strick @bendobrown.bsky.social · 01/12/2024

This festive season I’m sharing a video every day for the next 24 days showing useful OSINT tools & techniques. Creating this OSINT Advent Series has been a lot of fun and I hope it’s helpful for the ever-growing OSINT community! 🎄👇

50413104

Reposted by DFIR Diva

Eric Capuano @eric.zip · 27/11/2024

I have created a starter pack to shine light on organizations that make notable contributions back to the #infosec community in the form of generous free tiers, valuable webinars, trainings, resources, etc. I am sure there are others, just DM or reply with any suggestions! go.bsky.app/NMbiTUL

1310727

DFIR Diva @dfirdiva.bsky.social · 01/12/2024

Free & Affordable Training News Monthly: November - December, 2024 Curated Newly Released DFIR & OSINT Training, Books, Tools & Challenges from November Upcoming Live Training, Events, and CTFs for December Link: dfirdiva.com/free-afforda... #DFIR #DigitalForensics #IncidentResponse #OSINT

dfirdiva.com

Free & Affordable Training News Monthly: Nov - Dec, 2024 - DFIR Diva

Newly released DFIR and OSINT Training, Challenges, Labs, and Books. Upcoming DFIR & OSINT Conferences, CTFs, and Live Training.

032

Reposted by DFIR Diva

Kevin 🤖🕵️🍺 @stark4n6.bsky.social · 01/12/2024

#Stark4N6: Forensics StartMe Updates (12/1/2024) #DFIR www.stark4n6.com/2024/12/fore...

0143