Registry Explorer v1.5 coming soon! New stuff includes exporting selected bytes from hex viewer to a file, control updates, some fixes here and there, and showing all non-associated deleted values in a hive #DFIR

DFC2019 Challenge's Ranking Updated, dfchallenge.org/ranking-2019/

The 6th Forensic Insight Open Seminar (FIOS) opens, forensicinsight.org/fios/ #FIOS

Using MITRE ATT&CK for Forensics: WMI Event Subscription (T1084), cyberforensicator.com/2019/07/13/usi…

DFC2019 Ranking Updated, dfchallenge.org/ranking-2019/

DFC 2019's Ranking updated - 45 days left, dfchallenge.org/ranking-2019/

DFC 2019's Ranking updated, dfchallenge.org/ranking-2019/

Introduction to Atola TaskForce, blog.plainbit.co.kr/archives/2880

TaskForce vs. TX1 vs. Forensic Falcon, What would you choose? blog.plainbit.co.kr/archives/2932

The Superfetch service is no longer visible. This service has been replaced by SysMain. The EnablePrefetcher registry value is no longer meaningful.

The boot prefetch is no longer visible in Windows 10. It seems to be the effect of fast startup. Now let's look at bootckcl.etl.

Why does winprefetchview still parse format version 26? Please update to support Windows 10 (format version 30). PECmd is great, but it's hard to lose the GUI's comfort. github.com/libyal/libscca…

Check the following registry key for the folder id of Windows Timeline. NTUSER.DAT\Software\Microsoft\Office\<version>\Common\Identity\Identities

Which dForensic tools are used by professionals? blog.plainbit.co.kr/archives/3142

Digital Forensics Challenge 2020 is finally OPEN! dfchallenge.org #DFC2020

The ranking of the Dale F. Campbell challenge has been updated. dfchallenge.org/ranking-2020/

DFC(Digital Forensics Challenge)2021 started. Great experience, valuable time and improvement of my level dfchallenge.org #DFC2021

DFC2022 has started this year as well. Let's go solve the problem! dfchallenge.org

The 6th Digital Forensics Challenge (DFC) has begun. #DFC #DFC2023 dfchallenge.org

Malicious PyPI packages that steal cryptocurrency wallet information, blog.plainbit.co.kr/pypi-package-t…