Another Forensics Blog az4n6.blogspot.com

Digital Forensics and Incident Response Research,Python Scripts and Musings

Detecting Lateral Movement with WinSCP
az4n6.blogspot.com·324w·az4n6.blogspot.com
Triage Collection and Timeline Generation with KAPE
az4n6.blogspot.com·351w·az4n6.blogspot.com
Malicious PowerShell in the Registry: Persistence
az4n6.blogspot.com·413w·az4n6.blogspot.com
Mounting an APFS image in Linux
az4n6.blogspot.com·436w·az4n6.blogspot.com
How to mount Mac APFS images in Windows
az4n6.blogspot.com·436w·az4n6.blogspot.com
Finding and Decoding Malicious PowerShell Scripts
az4n6.blogspot.com·447w·az4n6.blogspot.com
Onion Peeler: Batch Tor Lookup Program
az4n6.blogspot.com·481w·az4n6.blogspot.com
When Windows Lies
az4n6.blogspot.com·481w·az4n6.blogspot.com
Quicklook thumbnails.data parser
az4n6.blogspot.com·501w·az4n6.blogspot.com
Mac Live Imaging: Functionality Versus Speed
az4n6.blogspot.com·503w·az4n6.blogspot.com
Cookie Cruncher Update, Timelines, Chrome Parser and more
az4n6.blogspot.com·506w·az4n6.blogspot.com
Mounting and Reimaging an Encrypted FileVault2 Mac Image in Linux
az4n6.blogspot.com·512w·az4n6.blogspot.com
How to image a Mac using Single User Mode
az4n6.blogspot.com·514w·az4n6.blogspot.com
How to image a Mac with Live Linux bootable USB
az4n6.blogspot.com·517w·az4n6.blogspot.com
QuickLook Python Parser - all your BLOBs belong to us
az4n6.blogspot.com·521w·az4n6.blogspot.com
More on Trust Records, Macros and Security, Oh My!
az4n6.blogspot.com·533w·az4n6.blogspot.com
Who's your Master? : MFT Parsers Reviewed
az4n6.blogspot.com·556w·az4n6.blogspot.com
SQLite Deleted Data Parser Update - Leave no "Leaf" unturned
az4n6.blogspot.com·568w·az4n6.blogspot.com
Does it make sense?
az4n6.blogspot.com·570w·az4n6.blogspot.com
Dealing with compressed vmdk files
az4n6.blogspot.com·579w·az4n6.blogspot.com

Keyboard Shortcuts

Navigation

Next / previous item
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help