After more than a decade in academia, teaching thousands of students and professionals, I’ve decided to return to the world of consulting. I’m deeply grateful to my family for their unwavering support and to everyone who has helped me grow into the person I am today. #DFIR

I want to thank @brettshavers.bsky.social for the opportunity taking his "DF/IR Investigative Mindset" course! This is an amazing course for everyone! Whether you're a vetran or just starting your #DFIR career. I can't recommend it enough. Brett, thank you so much 🙏🏻

Or these PDF/TXT executables!

For those who love executables :)

🚀 Starting August, you'll be able to test your malware analysis skills with our upcoming certification exam! Huge thanks to "Saad AHLA" for leading the development of this challenge. Get ready, this is truly a fun one! #malware #DFIR #CyberSecurity #ThreatHunting #BlueTeam #CCMA

Our CCDFA Bootcamp is one of the best deals in DFIR training! The course content, labs, virtual lab access, and live sessions all included. Only have 2 seats left for the August bootcamp! academy.cyber5w.com/courses/c5w-... #DFIR #DigitalForensics #CyberSecurity #BlueTeam #IncidentResponse

Last semester I created a course to help students start learning about Threat Simulation & Hunting. I used GOAD for the testing environement. So shoutout to @M4yFly for creating GOAD. Every lab was themed around the Game of Thrones series; students liked it. labs.cyber5w.com/courses/218b...

Week 30 - 2025 #DFIR thisweekin4n6.com/2025/07/27/w...

We created a simple certification exam "C5W Certified Digital Forensics Foundations (CDFF)" for those who took our FREE Intro to Digital Forensics course and want to test their skills #DFIR academy.cyber5w.com/courses/c5w-... #DFIR #C5W #CyberSecurity #DigitalForensics

If you’re looking to get into Digital Forensics, this is probably the most affordable & complete training you’ll find. The value packed into this bootcamp goes far beyond the price, & right now, there’s a discount running! #DFIR #DigitalForensics #CyberSecurity PLEASE SHARE with others! Thank You!

🔒 Master Windows Sandbox for secure app testing! Learn to install, configure, and safely run suspicious apps in an isolated environment. 💻 Hands-on labs included 💰 You can take it for FREE or Pay to Support Us! labs.cyber5w.com/courses/975e... #CyberSecurity #DFIR #C5W #WindowsSandbox #malware

This is a great opportunity for beginners to put their skills to the test! #DFIR #Cybersecurity #Infosec #DigitalForensics

We're happy to announce that @cyber5w.bsky.social is renewing their sponsorship of #OST2 at the Bronze🥉 level in 2025! Learn more about Cyber5W and their forensics training here: ost2.fyi/Sponsor_Cybe...

I was asked last week to help some students in the lab, but got surprised by my Digital Forensics senior students being there for one last time and giving me this gift! I will miss you all and I am so lucky that I got to work with you for the last 4 years! THANK YOU SO MUCH ❤️

This modexp.wordpress.com/2025/04/27/b... is an interesting post by modexpblog ... highly recommend checking it out.

Join me at the @ Techno Security & Digital Forensics Conference! I’ll be speaking on "Utilizing ETW for Ransomware Threat Detection" Register today at technosecurity.us/east/registr... and save 10% with code SPK25 #TechnoSecurity #DFIR #Malware #Ransomware

Great thread to read #DFIR

Arsenal Image Mounter v3.11.307 is now available with minor fixes & other improvements which include improved handling of corrupt Registry hives when launching virtual machines. See the change log for more information. arsenalrecon.com/downloads #DFIR

Excited to announce that I’ll be delivering a keynote at ICTCS’25 titled: "Beyond Tools: DFIR in the Era of Emerging Threats" Looking forward to connecting with researchers at #ICTCS25! #DFIR #CyberSecurity #DigitalForensics

Using Windows Sandbox - Course This is another FREE course to learn howto setup and use Windows Sandbox for #malware analysis or anything you want. #DFIR #infosec #CyberSecurity Check it out: labs.cyber5w.com/courses/975e...

Interested in learning about #DFIR and don't know where to start? Then I recommend checking our full "C5W-100 - Introduction to Digital Forensics" course. It is completely FREE and it should help you get started. #infosec #cybersecurity CC: @cyber5w.bsky.social academy.cyber5w.com/courses/C5W-...

Hey #DFIR community! I’m excited to share that I’ve turned my 010 Editor video series into a full course. It includes 40+ videos and hands-on labs, so you can practice what you learn. Please share with anyone who might find it useful!

Scheduled Tasks and GhostTask Investigations | #ShadowMe Webinar #DFIR #Cybersecurity www.youtube.com/watch?v=Xhez...

What to expect in the #ShadowMe series? #DFIR #Cybersecurity #Malware #Infosec ShadowMe #1 - Intro to Static Malware Analysis youtube.com/watch?v=8qq0...

Don't miss the livestream tomorrow with @johnhammond.bsky.social talking #DFIR ...

📢 Missed our IoT Forensics webinar? Watch it now! 🎥 Expert @cyberyom.bsky.social shares key techniques for extracting & analyzing data from IoT devices. Don't miss out! 🚀 Watch here: academy.cyber5w.com/courses/webi... #DFIR #Cybersecurity #Infosec #IoT #Investigations

Hey #DFIR community. Last month, we decided to open our @cyber5w.bsky.social C5W-100 Intro to Digital Forensics course & make it FREE; yes completely FREE! Since then more than 1K of new learners joined & we hope more will too. Please share with anyone who wants to learn. #Cybersecurity

Happening now by @cyberyom.bsky.social #DFIR #IoT #Cybersecurity

In case if you wonder what broke #ProcessHollowing on Windows 11 24H2, I have something for you: hshrzd.wordpress.com/2025/01/27/p...

Some people tend to forget that kindness and manners are free. #life

If you're interested in #IoT #DFIR? Don't miss this month's @cyber5w.bsky.social webinar. We have a special guest @cyberyom.bsky.social who will do both HW+SW forensics on an IoT device. #infosec #cybersecurity #webinar #C5W academy.cyber5w.com/products/liv...

🌟New report out today!🌟 Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware Analysis & reporting completed by @r3nzsec, @MyDFIR & @MittenSec. Audio: Available on Spotify, Apple, YouTube and more! thedfirreport.com/2025/01/27/c...

Scheduled Tasks and GhostTask Investigations | #ShadowMe Webinar recording... Special thanks to @maryst33d.bsky.social for joining me... The recording can be found below. #DFIR #Investigations www.youtube.com/watch?v=Xhez...

Week 04 - 2025 #DFIR thisweekin4n6.com/2025/01/26/w...

Exciting News🚀🎉: Our @cyber5w.bsky.social Intro to DFIR Course is now FREE!🔍 Please read our announcement found below. The course will also be available for FREE @opensectraining.bsky.social very soon! #DFIR #infosec #cybersecurity #DigitalForensics cyber5w.com/into-dfir.html

This was the output of Zeek! #DFIR #Cybersecurity #Infosec #malware

Something big is coming... Tomorrow, I'll reveal what it's all about! ... Stay tuned! 🚀 #DFIR #Infosec #Cybersecurity

T-Warz is our new CTF going live at TechnoSecurity East this year! This isn’t your ordinary CTF, it’s a #Cyberwarzone! If you’re up for a challenge, join us. Don’t miss out! #DFIR #Cybersecurity #CTF www.technosecurity.us/east/confere...

This is a nice micro course if anyone is interested in learning how to use Windows Sandbox for Malware Analysis. Your feedback is very welcomed! #DFIR #Cybersecurity #Infosec #WindowsSandbox #Sandbox labs.cyber5w.com/courses/975e...

Our @cyber5w.bsky.social next month #DFIR webinar will be about Windows Scheduled Tasks and GhostTask Investigations. #DFIR #Cybersecurity #infosec If you would like to join, please sign-up below (FREE). bit.ly/ghost-task

What are ppl using to export data from #Elastic to copy to another elasticsearch host? #DFIR #Cybersecurity #logs #elasticsearch #SOC

Parsing Multiple Registry Hives using VSCToolset and RegRipper #DFIR #Windows #Investigations www.youtube.com/watch?v=Lokq...

Parsing Run Keys using RegRipper #DFIR #Windows www.youtube.com/watch?v=OhOx...

Run Key Mystery - Did the Program Truly Run or Not? #DFIR #Windows #Investigations www.youtube.com/watch?v=un48...

I have a huge announcement coming first week of 2025! Don't miss it :) #DFIR #Cybersecurity #Infosec

You take the red pill... you stay in Artifactland, and I show you how deep the rabbit hole goes… You take the blue pill, the story ends, you wake up in your bed and believe whatever you want to believe about your logs… #DFIR Thanks to @brettshavers.bsky.social for sharing this!

Fast Way to Build and use Batch Files with Eric Zimmerman's RECmd ... #DFIR Note: this is an update to my previous recording which had some sound issues... I also added something extra related to KAPE based on the feedback I received... www.youtube.com/watch?v=jn8J...

Fast Way to Build and use Batch Files with Eric Zimmerman's RECmd #DFIR www.youtube.com/watch?v=KfjP...

Recording of December 2024 Webinar: Windows Forensic Investigation – Internal Investigation (Part 1) #DFIR #Cybersecurity #Infosec www.youtube.com/watch?v=kDFd...