4n6k 4n6k.com

Forensics Quickie: Identifying an Unknown GUID with Shellbags Explorer, Detailing Shell Item Extension Block 0xbeef0026, & Creative Cloud GUID Behavior

4n6k.com·408w·4n6k.com

Forensics Quickie: Methodology for Identifying Linux ext4 Timestamp Values in debugfs `stat` Command

4n6k.com·435w·4n6k.com

Forensics Quickie: Methodology for Identifying "Clear Recent History" Settings for an Old Version of Firefox

4n6k.com·445w·4n6k.com

Forensics Quickie: Accessing & Copying Volume Shadow Copy Contents From Live Remote Systems

4n6k.com·485w·4n6k.com

Forensics Quickie: PowerShell Versions and the Registry

4n6k.com·508w·4n6k.com

Jump List Forensics: AppID Master List (400+ AppIDs)

4n6k.com·531w·4n6k.com

Forensics Quickie: NTUSER.DAT Analysis (SANS CEIC 2015 Challenge #1 Write-Up)

4n6k.com·573w·4n6k.com

Forensic FOSS: 4n6k_volatility_installer.sh - Install Volatility For Linux Automatically

4n6k.com·612w·4n6k.com

Forensics Quickie: Merging VMDKs & Delta/Snapshot Files (2 Solutions)

4n6k.com·631w·4n6k.com

Forensics Quickie: Verifying Program Behavior Using Source Code

4n6k.com·633w·4n6k.com

Forensics Quickie: PDF Metadata Forensics (Sunday Funday Answer)

4n6k.com·639w·4n6k.com

Forensics Quickie: Pinpointing Recent File Activity - RecentDocs

4n6k.com·640w·4n6k.com

Shellbags Forensics: Addressing a Misconception (interpretation, step-by-step testing, new findings, and more)

4n6k.com·650w·4n6k.com

UserAssist Forensics (timelines, interpretation, testing, & more)

4n6k.com·679w·4n6k.com

Forensics Quickie: Extracting Unallocated Space with The Sleuth Kit

4n6k.com·742w·4n6k.com

Forensics Quickie: Recovering Deleted Files With Scalpel (.CR2 Photos)

4n6k.com·749w·4n6k.com

Forensics Quickie: Mounting Split .vmdk

4n6k.com·764w·4n6k.com

Jump List Forensics: AppIDs Part 2

4n6k.com·765w·4n6k.com

Jump List Forensics: AppIDs Part 1

4n6k.com·767w·4n6k.com

Log in to enable infinite scrolling