D (4n6)

Soft launch in November!

Kicking off live AMA streams while I:
• Shiny farm in Pokémon ZA

• Plan Eberron sessions

Ask me anything: digital forensics, law, TTRPGs, video games.

Follow + hit 🔔 to catch the first stream.

"What is real?"

That will be the #1 question posed to digital forensic experts in 2026.

a cartoon character with a hat on looks at a monitor ALT: a cartoon character with a hat on looks at a monitor

I just spent 6 hours doing a deep dive into syncing data between an iPhone and several other devices.

The rabbit hole is deep but I am now wiser for it.

Blindfolded interviews to prevent AI aided responses.

Who has a good podcast that needs a guest?

For the record: I am considering starting one focused on Defense focused Digital Forensics.

PSA: do not get FIOS from Verizon, their support is abusive to 10+ year long customers.

@verizonofficial.bsky.social

Back in court.

Reminder:

Screenshots.
Are.
Not.
Evidence.

I'm Doing a Thing!

I will be joining the Amped Software's User Days as a guest panelist.

#dfir #VideoForensics #CyberSec #Digitalforensics #Criminaldefense

ampedsoftware.com/amped-user-d...

Defense Digital Forensic Experts are truly the only parties able to peer review Law Enforcement's Digital Forensic processes.

They deserve better support and representation in the field.

Doing my first panel, any tips?

#dfir #CyberSec

Today is a good day to DFIR

What does this time mean? Oh man, what about this reference? Oh and this time? How does that relate to the first time? Why are they different? Wait, App B uses it too? Which put the data there? How reliable is it? Testing. Repeat.

Story of my life.

Looking forward to it!

What's your #1 tip to new digital forensic examiners and analysts?

Mine: Question Everything.

#dfir #CyberSec #cybersecurity #Digitalforensics

Has anyone gotten a copy of Ian Whiffin's PowerPoint?

I'd like to review it!

#dfir #criminaldefense #CyberSec

PSA: Cellebrite and Magnet delete iOS unified logs during their extraction process

Get them before you dump the phone.

Suggestion: video record the process

#dfir ##legal #CyberSec #digitalforensics

The court system needs to be optimized.

I can't even remember how many times trials/motions have been scheduled and the judge decides to take half-a-day after I burned through 5 hours of funds waiting

This Ian Whiffin testimony is great, though it seems he's giving a little too much strength to the data.

a man in a suit and tie is eating popcorn while sitting at a table . ALT: a man in a suit and tie is eating popcorn while sitting at a table .

Good morning.

Someone needs to do a wellness check on ChatGPT

Digital forensics is all about the analyst, not the tool.

Uhh... Belkasoft...

Automate Forensics? Don't do this

When you use AI for forensic analysis:

Last week a judge denied me the ability to testify at a motion hearing.

Her reason? I wouldn't add anything to the argument and she didn't care about the scientific part of the case.

The case involved video forensic and Snapchat issues.

100% going to be appealed.

Why we do what we do.

##criminaldefense #dfir ##CyberSec

NESPIN needs to be better.

Maybe don't screenshot a Word document with editing visible in your email blasts?

More importantly, the Cellebrite CCPA/CCO Courses are necessary for any examiner if testimony is a requirement to their position.

A forensic examiner in Massachusetts reached out to me regarding a position.

While I don't, does anyone have any remote work or in-person work in the New England area for them?

Please private message me and I can relay your information to them.

Thank you @magnetforensics.bsky.social

AXIOM 8.8's best feature (IMO)

LeadsOnline's CellHawk has a nice new update!

#CSLI #DigitalForensics #DFIR

Pop quiz.

If a GrayKey extraction fails the hash validation and the original extraction is no longer on the GrayKey, should it be used as evidence?