Derek follows up on a requested feature for DeepSpar's Guardonix and USB Stabilizer.

Leveling up some Digital Intelligence swag.

Derek explores the macOS native commands used in Andrea Lazzarotto's open-source project, Fuji.

Check out our latest Insights article "Introducing AIM Remote Agent" for some compelling use cases, screenshots, & photos involving computers booted with WinFE (Windows Forensic Environment) & disks shared over networks with Arsenal Image Mounter. arsenalrecon.com/insights/int.... #DFIR

Thought I’d do something fun. Presenting the DFIR_Toolbar. Basically a toolbar that can be anything you want it to be. https://malwaremaloney.blogspot.com/2025/01/dfirtoolbar.html

About 16 years of service. Replaced it with an Insinkerator Badger 5!

I wrote a blog post reflecting on selected topics from 2024. mreerie.com/2024/12/27/r...

Placed a few glow in the dark stars in the kids room. These are nice and bright!

It was great to chat #DFIR with @arcpoint-amy.bsky.social and Amy Moles in this festive themed podcast. Thank you for having me on! m.youtube.com/watch?v=U0Zs...

🎄ArcPoint Forensics DFIRmas Podcast Season 2 Episode 1 is out! ❄️Topic: Validation 🎅Guest: Me! ☃️Subscribe to the channel for more interviews. 🌟Check it out at the link below: https://buff.ly/4g4U6sk #DFIR #DigitalForensics #MobileForensics

I wrote a blog post reflecting on what I read from Brett Shavers' book, Placing the Suspect Behind the Keyboard: DFIR Investigative Mindset.

I built an L-shaped desk in 2016. I’ve made some changes since then. Fortunately, I’ve made extra H-frame legs so I can keep the table tops independent. But today, I had use case to make a stubby table top to turn the L into a T. Just need to add coats of polyurethane, mount, and call it good.

#iLEAPP v2.0.1 out now! #DFIR github.com/abrignoni/iL...

I would like to introduce Lyman. A tool to aid in the creation of “mapping” cstruct files for OneDriveExplorer. https://github.com/Beercow/Lyman

FOR518: Mac and iOS Forensic Analysis and Incident Response, Re: SANS FOR518 OnDemand Experience Derek completed the SANS FOR518 course. He's thinking differently.

Sacramento, CA. The HTCIA Northern California chapter will have our meeting on 12/05. MSAB will be hosting a lunch and learn with a dash of CTF. Register here: bit.ly/registerctf

Just a picture of chickens to get this thing started.