To be the best at this thing we call “DFIR”, you need to be singularly focused on the primary objectives of a digital forensic examination. These (broadly) are:
- locate EVIDENCE of the crime/incident,
- identify the SUSPECT(s),
- convey findings in COURT.
Locating digital EVIDENCE...
The winner of this month's DFIR Book Challenge was Madi (https://twitter.com/brum_below) and a signed copy of the X-Ways Forensics Practitioner's Guide/2E is being shipped.
I have another book in hand for the next giveaway. But I have to connect with more authors for more books! ...
Start asking the right questions to get the answers that you need. In any forensic analysis, a dive into data needs a “why” before even looking at the bits and bytes. Without a “why”, you will never get the “who-what-where-when-how”. You will get...
I made a meme.
I tweeted a simple meme and it created good discussion in which I gained more than expected by reading the perspectives of so many. The civility in the thread was awesome, which I attribute to cool people in this cool DFIR field.
—...
Every job skill requires some level of training. Some jobs require education in the form of degrees or certifications. None of these guarantee competence in any skill. It also doesn’t indicate that learning occurred. I look at training or education documentation as proof that time was spent...
It is time for you to talk to another DFIR human in real life
One of the very few things that I will miss from the past two years is the wealth of online training and videoconferences that were available. It was such an amazing time of resources where every vendor, every expert, and every...
It was much easier to learn digital forensics decades ago. This is not because systems were less complex or that datasets were smaller. It was easier because there just wasn’t that much to learn. On top of that, there were few resources to draw upon. No college degree programs, only a...
One certainty is that life certainly is not fair. If you want the solution to this problem, skip to the last paragraph, but you’ll miss a lot of good points.
Life is unfair!
A positive reaction to this life fact is to accept it and move forward. A negative reaction would be to nothing but...
Some updates!
Do you want to be a book contributor?
X-Ways Guide course updates!
WinFE!
And more!
PS!! Don't forget to leave an Amazon review if you liked the XWF Guide :)
Session 1 and 2 are finished (recordings are uploaded). Session 3 will be at 10AM (Pacific time) on Tuesday, February 8.
So far, we've gone over what is X-Ways, documentation that you can use for credibility in using it, and basic configuration considerations.
Next, we will be working in...
