A trick and a treat this week with a quiet milestone for cross-platform DFIR tooling — MalChelaGUI now runs seamlessly inside Windows through Ubuntu WSL2, with zero configuration required. #DFIR #MalwareAnalysis

The 13th annual @volatilityfoundation.org #PluginContest is now OPEN! This is a meaningful way to contribute to open source forensics & gain community-wide visibility for your work. And, as always, winners get cash prizes! Submission Deadline: 31 December 2025 #dfir #memoryforensics

This is gonna be a good one, I may be biased!

In case you missed it. New release of OneDriveExplorer. It has a dedicated parser for MicrosoftListSync.db (offline mode). #DFIR malwaremaloney.blogspot.com/2025/09/oned...

Week 39 - 2025 #DFIR thisweekin4n6.com/2025/09/28/w...

This week's #MobileUnpacked is going to be a big one! Join us as @cscottvance.bsky.social explores the brand-new #iOS26, including UX changes of #LiquidGlass, and updates to the Phone & Messages app that could have serious impacts. Save your spot now: ow.ly/zr8150X0bp7

PancakesCon & @comfyconau.bsky.social are THIS SUNDAY, September 21st. Here are some final notes on how to make the most of virtual conferences and where to find useful information! pancakescon.com/2025/09/17/f...

The death of Robert Redford (RIP) means the window to rewatch Hackers in honor of the 30th anniversary has officially closed and it is now time to re-watch Sneakers. (Time to rewatch Sneakers will continue indefinitely.)

A new UFADE Version is out! (github.com/prosch88/UFA...) New in 1.0.1: Customizable backup functions, The option to decrypt existing iTunes backups, Interface improvements, More consistent display on different platforms, Includes the latest identifiers for the new iPhone and Apple Watch models

Happy 30th anniversary to Hackers!

If you’re cold, they’re cold. Bring them inside

Happy 9/9! It's time for a new 13Cubed episode. 🎉 I'm sure you're as sick of hearing about AI as I am, but I have some thoughts... Let's talk about it. www.youtube.com/watch?v=lvkB... #DFIR

Guess who forgot his test phone password and now has to wipe it 🙃

Good news, iLEAPP v2.3.0 release is out, go grab it now! github.com/abrignoni/iL...

#Stark4N6: Forensics StartMe Updates (9/1/2025) #DFIR www.stark4n6.com/2025/09/fore...

Got some vintage wax packs for fun

Another 35% off sale on the shop! #DFIR www.teepublic.com/user/stark4n6

In DFIR, reliable storage is essential for effective workflows. Crabwise, a USB benchmarking utility, addresses performance variability by calculating read and write speeds under direct conditions, bypassing caching and logs results for easy comparison. #DFIR

Less than one week left to back the official #DFIR Discord challenge coin www.kickstarter.com/projects/off...

This is a real job posting, you need 35 years experience minimum...

This will be a fun one for forensics

I've forgotten how ridiculously slow a 1gb RAM Raspberry Pi runs 😂

Week 34 - 2025 #DFIR thisweekin4n6.com/2025/08/24/w...

Christian Peter took my small start, ran with it, and found the "finish line". There's always more work to be done, but he did what I intended on doing - completed an open source parser for Potato Chat. Check out his writeup here! #dfir #ileapp #opensource #python cp-df.com/en/blog/pota...

Week 33 - 2025 #DFIR thisweekin4n6.com/2025/08/17/w...

Appears OneDrive snuck a new sync client in. Works with personal accounts at the moment. It’s WebView2. You can find data in the following locations: AppData\Local\Microsoft\OneDrive\OD4 AppData\Local\Microsoft\OneDrive\Logs\OD4 Where are my browser forensics experts at? #DFIR

#Stark4N6: Forensics StartMe Updates (8/1/2025) #DFIR www.stark4n6.com/2025/08/fore...

I followed the guides from @hacks4pancakes.com and @stark4n6.bsky.social in building my index for my first SANS class, hit a 96%. Two months ago me would have been happy with that, tonight me is grumpy about the three that got away. tisiphone.net/2015/08/18/g... www.stark4n6.com/2020/11/gett...

The things you see at bars

#Stark4N6: Introducing DirListHash - A Directory & Hashing Utility #DFIR #Python www.stark4n6.com/2025/07/intr...

Portable Forensics with Toby: A Raspberry Pi Toolkit Toby is a compact, portable forensics toolkit built on a Raspberry Pi Zero 2 W, designed for ease of use in field analysis and malware triage. bakerstreetforensics.com/2025/07/20/p... #DFIR #MalwareAnalysis #RaspberryPi

#Stark4N6: New release of ASP v1.1 💨Significant speed boost by deduplicating input text files ⚙️Add metadata to SQLite output (as separate table) 📓Minor report/console updates 🐛Minor bug fixes #DFIR github.com/stark4n6/ASP...

Google confirms ChromeOS and Android are being merged into ‘a single platform’

#Stark4N6: Introducing ASP - App Store Package Search #DFIR www.stark4n6.com/2025/07/intr...

New vibe coded project dropping tomorrow 🐍, stay tuned

Week 27 - 2025 #DFIR thisweekin4n6.com/2025/07/06/w...

Digital Forensics Discord Challenge Coin, via @Kickstarter #DFIR www.kickstarter.com/projects/off...

The big v1.0 release of #UFADE is here, thanks as always to @zamomin.bsky.social for provided an awesome tool github.com/prosch88/UFA...

#Stark4N6: Forensics StartMe Updates (7/1/2025) #DFIR www.stark4n6.com/2025/07/fore...

Week 26 - 2025 #DFIR thisweekin4n6.com/2025/06/29/w...

Derek follows up on a requested feature for DeepSpar's Guardonix and USB Stabilizer.

Losing power in 100 degree heat is fun...

Week 25 - 2025 #DFIR thisweekin4n6.com/2025/06/22/w...

MalChela v3.0 enhances investigative workflows by introducing cases for organization, replacing MismatchMiner with FileMiner for improved file analysis, and suggesting tools based on file characteristics, streamlining the analysis process. #MalChela #DFIR #MalwareAnalysis

#MagnetUserSummit is coming back to Nashville April 20-22 ready to help redefine and rediscover what's possible in #DFIR! We'll cover a variety of topics, including #AI, #MobileForensics, #Cloud, #Automation and much more. Get started today at www.magnetusersummit.com. #MUS2026

We used to be a proper country.

And now a classic of the genre. #DigitalForensics #MobileForensics #DFIR

TIL 122+ TB SSDs are a thing

A rare 40% off happening now on the merch shop! #DFIR www.teepublic.com/user/stark4n6