A startpage with online resources about Forensics, created by Stark 4N6.

A startpage with online resources about Forensics, created by Stark 4N6.

If your organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Adam at Hexacorn The boring state of stalled timelines… …

If your organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Belkasoft Apple Biome Forensics: Artifacts, Locations, a…

YouTube video by Alexis Brignoni

The Evidence Locker received some quality of life updates as well as some new evidence! File Search Updates: - Dropdown and text filter on Evidence Source - Tool tip for OS of evidence source and cli...

What's Changed Path slash normalization across all reports Add CSV export option by @Gear-I in #4 New Contributors @Gear-I made their first contribution in #4 Full Changelog: v3.0.0...v3.1.0

What's Changed Huge thank you to @abrignoni for adding E01 and forensic container support. Feat/disk image input by @stark4n6 in #3 Full Changelog: v2.0.0...v3.0.0

Find and submit Events, New Releases, Discounts, Giveaways, Scholarships, CFPs, and Jobs related to Digital Forensics & Incident Response (DFIR), Open-Source Intelligence (OSINT), and Cybersecurity.

If your organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Belkasoft Corporate Endpoint Triage: How It Works and Wh…

I've gotten some great feedback and love from the forensics community about The Evidence Locker page. With that said I never settle and I'm...

Shortlink: startme.stark4n6.com QR Code: If people have suggestions for additions please feel free to shoot me a message on the app ...

Hello fellow socially responsible beer drinkers. I've using the Untappd app for a long time now (3.7k check-ins and counting) but just more ...

At Triangle Wave Security we wanted to automatically hook our spreadsheet of doom into IOC feeds and sandbox results as the incident unfolded. Bulk copy-and-paste just didn’t have the juice a…

Shop t-shirts, phone cases, hoodies, art prints and mugs created by independent artists from around the globe.

A current app list answers one question. Installation logs, App Store databases, Biome streams, and deletion records answer several others. We went back to an iOS workflow from 2018, tested it from iO...

What's Changed Update continuous-integration-pip.yml by @simsong in #479 Update identify_filenames.py by @h-ssh in #482 Update LICENSE.md by @simsong in #478 add missing include by @rick-gnous in ...

At Triangle Wave Security we wanted to automatically hook our spreadsheet of doom into IOC feeds and sandbox results as the incident unfolded. Bulk copy-and-paste just didn’t have the juice a…

Our need will be the real creator. - Plato, The Republic I have been quiet the past few months, but that does not mean I haven't been busy. While working on a larger project I found myself getting really annoyed with timestamps. Because I was working on my Mac, I was having to run out to a website I have used for years for quick timestamp decoding, but I was annoyed with the fact that I was having to do that.

In working through some sample evidence during training I came across that Digital Wellbeing, specifically Samsung's iteration of it, tracks...

What's Changed Update continuous-integration-pip.yml by @simsong in #479 Update identify_filenames.py by @h-ssh in #482 Update LICENSE.md by @simsong in #478 add missing include by @rick-gnous in ...

A few months back Android introduced their new intrusion logging capabilities as part of their advanced protection mode. Security Lab has a ...

25 track album

Shortlink: startme.stark4n6.com QR Code: If people have suggestions for additions please feel free to shoot me a message on the app fo...

At Triangle Wave Security we wanted to automatically hook our spreadsheet of doom into IOC feeds and sandbox results as the incident unfolded. Bulk copy-and-paste just didn’t have the juice a…

SEGB Biome streams are the hot replacement for iOS KnowledgeC entries. Mattia Epifani has a great blog on the history including shout out...

Do you do forensic research? Do you have a bunch of random scripts that do one thing to help you along the way? That's precisely what the Sc...

What do texture decompression, C-extensions for python, and LEAPPs have in common? Read to find out!

A look at United Airlines iOS app research in iLEAPP, including where the data lived, which rabbit holes mattered, and why nearby app/plugin data can change the shape of the parser.

If your organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Alexis Brignoni at LEAPPs Blog The Apps We Are Not Parsi…

Browse all artifacts supported by iLEAPP, ALEAPP, RLEAPP, and VLEAPP.

Batch LEAPP now answers a question I have wanted answered for years. Out of all the apps installed on our test devices, which ones do the LEAPPs actually parse, and which ones are we missing? One flag...

If your organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Brian Carrier at Cyber Triage 3 AI Prompts for More Conf…

How many different ways are there to get Android data? What’s the difference between agent-based extractions and ADB acquisitions?

If your organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis Christopher Eng at Ogmini Examining Tailscale Artifacts …

Batch LEAPP runs any LEAPP tool across an entire folder of extractions and builds one report index that links every result, with hashing and a manifest for your case file. Here is what it does and how...

Wallpaper research led to a broader Apple image-cache problem: ATX texture files. Here is how iLEAPP now parses and decodes many of them, with a reusable parser that should be easy to port into other ...

If your organisation is interested in sponsoring an upcoming post then reach out via the contact form!No sponsor this week Forensic Analysis F-Response F-Response Collect, X-Ways, and You Forensafe…

YouTube video by 13Cubed