🎉 A new 13Cubed episode is up! This time we're exploring the USN Journal on a live system. How can we view it while Windows is actively running, and does the reality match the common explanations? Let's find out! www.youtube.com/watch?v=eSLH... #DFIR #DigitalForensics

🍎 Happy #WWDC26 week! 🚀 We've just released a major update to Investigating macOS Endpoints, featuring an all-new hands-on macOS forensics scenario. 👉 www.youtube.com/watch?v=tRvw...

🎉 Today, we released a major update to Investigating Windows Endpoints, with significantly expanded content on registry forensics! 🔥 Next Monday is Apple's Worldwide Developers Conference (WWDC). Watch for another exciting update for Investigating macOS Endpoints! training.13cubed.com

How about an unscheduled, impromptu Friday night 13Cubed episode? Let’s talk about Copy Fail. www.youtube.com/watch?v=ZVmp...

It's time for a new 13Cubed episode! I've got some thoughts about AI and digital forensics. Let's talk about it. www.youtube.com/watch?v=wKn-... #DFIR

🎉 It’s time for a new 13Cubed episode! For macOS forensics, Fuji is a must-have. This episode is an excerpt from Investigating macOS Endpoints and covers the latest version, with major new changes. Let’s walk through a live acquisition! www.youtube.com/watch?v=9ZkL...

🎉 It's time for a new 13Cubed episode! Learn about another obscure Registry-based execution artifact. www.youtube.com/watch?v=yoFk... #DFIR

📣 I partnered with @13cubed.bsky.social for a Valentine's Day Giveaway! 🎁 🏆1 Grand Prize winner will receive one course of their choice from the list below + a 13Cubed Investigator T-Shirt. 👕5 winners will receive a 13Cubed Investigator T-Shirt.

🚀 A new 13Cubed episode is up! Ever wondered how Windows Explorer really obtains file timestamps when you browse a directory of files? The answer might surprise you! www.youtube.com/watch?v=PdyV... #DFIR

🎉 Happy New Year! A major update is now live across multiple 13Cubed courses. Take a look at what’s new below 👇 www.youtube.com/watch?v=CzF6...

December is here, and so is a new 13Cubed episode! 🎉🎄 I went through your questions and had a lot of fun with this AMA/Q&A style video. www.youtube.com/watch?v=duz5... #DFIR

🎄🎉 Our only sale of the year is now live through Tuesday! Use code BLACKFRIDAY2025 to save $100 on all courses and bundles. training.13cubed.com #DFIR

Today we honor those who’ve served. 🎖️ 13Cubed proudly supports veterans year-round with a 10% discount through VetSec, plus 10% off for faculty, staff, and students. Reach out to [email protected] or visit training.13cubed.com to learn more.

🎃 Happy Halloween Week! It's time for a new 13Cubed episode. Let's look at a quick and easy way to find the Intermediate Symbol File (ISF) for your Linux memory image and speed up your analysis. www.youtube.com/watch?v=W40g... #DFIR #Linux #MemoryForensics

Happy 9/9! It's time for a new 13Cubed episode. 🎉 I'm sure you're as sick of hearing about AI as I am, but I have some thoughts... Let's talk about it. www.youtube.com/watch?v=lvkB... #DFIR

🚨 A new 13Cubed episode is up! In this one, I sit down with @jbradley89 to talk about his upcoming book Threat Hunting macOS -- the perfect companion to our new “Investigating macOS Endpoints" course. www.youtube.com/watch?v=8Uj2...

🛑✋ Well, that was fast! The contest is now closed, and all 5 winners have been selected and notified. Of course, the challenge will remain available and will hopefully serve as a great study resource for a long time to come.

Happy summer! ☀️ Ready for a new 13Cubed memory forensics challenge? You could win an official 13Cubed challenge coin. 🎉 Check it out here! www.youtube.com/watch?v=6JN6... #DFIR

This Monday, we’re dropping a new memory forensics challenge—this time focused on Windows! Like the last Linux one, you’ll have a chance to win a 13Cubed Challenge Coin. Subscribe at youtube.com/13cubed and click the 🔔 so you’re notified!

We just issued our 500th 13Cubed certification! 🎉 Learn more at 13cubed.com/certs. All Windows, Linux, and macOS courses include certification attempts at no extra cost, allowing you to demonstrate real-world practical application of forensic investigative techniques. 🏅

🎉 Big news! Investigating macOS Endpoints is now live—plus our new *NIX Bundle and XPlat Bundle Complete (all 13Cubed courses in one package). Thanks for patiently waiting! Dive in now 👉 training.13cubed.com #DFIR #macOS #Linux

🎉 It’s time for a new 13Cubed episode! We’ll briefly explore how process hollowing works and check out the relatively new windows.hollowprocesses plugin for Volatility 3. There are also two memory samples you can download for practice! www.youtube.com/watch?v=x5mG... #DFIR

🎉 Happy Friday! Two quick updates: Investigating macOS Endpoints and related bundles are now open for waitlisting! 👉 13cubed.com 13Cubed Merch Store is LIVE with fresh designs and premium shirts! 👉 shop.13cubed.com

It's time for a new 13Cubed episode! 🎉 This is a small excerpt from one of the lessons in the upcoming "Investigating macOS Endpoints" course. Look for the course release this summer! www.youtube.com/watch?v=9bEi... #DFIR #macOS

It's time for a new 13Cubed episode covering a very obscure evidence of execution artifact. www.youtube.com/watch?v=edJa... Enjoy! #DFIR

Happy New Year! 🎉🥳 The first 13Cubed episode of 2025 is here! Let's explore some groundbreaking research from CyberCX on “rewinding the NTFS USN Journal.” www.youtube.com/watch?v=GDc8... #DFIR

Happy Friday the 13th! 🎉 We’re thrilled to share that our next 13Cubed course—Investigating macOS Endpoints—is officially in the works. This highly requested training is now our top priority, with a target launch by mid-2025. We'll keep you updated along the way! #DFIR

Happy Cyber Monday! 🎉 A brand-new 13Cubed episode on NTFS FILE record reuse is out now. Dive into the details and don’t forget—today’s the final day to save 13% on all 13Cubed training courses with code BLACKFRIDAY2024. Ends at 00:00 UTC Dec 3. www.youtube.com/watch?v=6LpJ... #DFIR

🎉🦃 The 13Cubed Black Friday sale is now live through Monday. Use coupon code BLACKFRIDAY2024 to save 13% -- our biggest promotion of the year. #DFIR

🎉🦃 Our annual Black Friday sale starts Friday, November 29, and runs through Monday, December 2. All courses and bundles will be 13% off for individual purchases. Standard bulk discount rates apply. #DFIR

I just released an update to Skeebus, my macOS GeoIP menu bar app. Check it out! apps.apple.com/us/app/skeeb... #macOS

Hello! 👋