Kevin 🤖🕵️🍺

I cannot stress this enough, asset management should be a big part of your cybersecurity response plan

Truth in Data Podcast Feature - CTFs I was asked to join my good friends Debbie, Jessica and Kim over at Hexordia for their Truth in Data podcast to talk one of my favorite to...

#Stark4N6: Truth in Data Podcast Feature - CTFs www.stark4n6.com/2025/10/trut...

BSides NYC 2025 CTF - Forensics While I unfortunately couldn't attend the conference I did see that the BSides NYC CTF board was available still ( check here ). Christopher...

#Stark4N6: BSides NYC 2025 CTF - Forensics www.stark4n6.com/2025/10/bsid...

S3:E10 // Picking apart the passcodes: Determining the method of unlock on devices - Magnet Forensics A common theme in digital forensics is putting the target behind the keyboard. One way to help this is around the use of passcodes and especially the use of biometrics. How can we determine though wha...

A common theme in #DFIR is putting the target behind the keyboard. One way to help is around the use of passcodes and especially the use of biometrics. On Oct 29, join us for our next #MobileUnpacked where @cscottvance.bsky.social will dive deeper into these topics: ow.ly/p1r550XgvXb

Overcoming mobile forensics challenges in workplace investigations - Magnet Forensics Mobile devices have become indispensable tools in the modern workplace, enabling more than just checking email. Employees now browse the web, access sensitive company data, and conduct daily business ...

On October 22, join us for a webinar where we'll share common challenges in #MobileForensics within #WorkplaceInvestigations, and how the combined power of Magnet #Verakey & #AxiomCyber help solve them: ow.ly/Erk350XeoFs #DFIR

MALoney (It's in the name): OneDrive Quick Access What is Quick access? Quick access makes it simple to find your frequently used storage locations, inclu...

Did a little digging in Microsoft.FileUsageSync.db. Found some information to piece together OneDrive Quick Access. #DFIR
malwaremaloney.blogspot.com/2025/10/oned...

Streamline Digital Evidence Collection with CyberPipe 5.2 CyberPipe, developed for incident response, is a PowerShell script facilitating efficient digital evidence collection in enterprise settings. Recent updates include improved collection methods, capabilities like QuickTriage for faster artifact gathering, and enhanced reliability with advanced error handling. Version 5.2 aims to streamline operations while ensuring forensic integrity and transparency. #DFIR

CyberPipe, a PowerShell script for digital evidence collection, has been updated with enhancements in collection, capabilities, and reliability. New features include intelligent collection with dual disk space validation, a QuickTriage profile, and improved BitLocker recovery. #DFIR

Anyone else's work issued laptop just bluescreen crash weekly or is it just me?!

Week 41 – 2025 Inside the Salesloft-Drift Breach: What It Means for SaaS & Identity SecurityIn this session, Permiso’s CTO will cover:- How attackers moved from GitHub → AWS → Salesforce using stolen OAuth to…

Week 41 - 2025 #DFIR
thisweekin4n6.com/2025/10/12/w...

MALoney (It's in the name): OneDrive Quick Access What is Quick access? Quick access makes it simple to find your frequently used storage locations, inclu...

Did a little digging in Microsoft.FileUsageSync.db. Found some information to piece together OneDrive Quick Access. #DFIR
malwaremaloney.blogspot.com/2025/10/oned...

Cyber Unpacked with Magnet Forensics Feature I had the pleasure of taking part in a panel discussion for the Cyber Unpacked series with Magnet Forensics. What a great conversation with ...

#Stark4N6: Cyber Unpacked with @magnetforensics.bsky.social Feature www.stark4n6.com/2025/10/cybe...

Cross-Platform DFIR Tools: MalChelaGUI on Windows A trick and a treat this week with a quiet milestone for cross-platform DFIR tooling — MalChelaGUI now runs seamlessly inside Windows through Ubuntu WSL2, with zero configuration required. #DFIR #MalwareAnalysis

A trick and a treat this week with a quiet milestone for cross-platform DFIR tooling — MalChelaGUI now runs seamlessly inside Windows through Ubuntu WSL2, with zero configuration required. #DFIR #MalwareAnalysis

The 13th Annual Volatility Plugin Contest is Open! We are excited to announce that the Volatility Plugin Contest is officially open for submissions! The annual Plugin Contest is your opportunity to: Directly contribute to the open source forensics …

The 13th annual @volatilityfoundation.org #PluginContest is now OPEN! This is a meaningful way to contribute to open source forensics & gain community-wide visibility for your work. And, as always, winners get cash prizes!

Submission Deadline: 31 December 2025

#dfir #memoryforensics

This is gonna be a good one, I may be biased!

MALoney (It's in the name): OneDrive. Let's take this offline At the beginning of this year, I started adding data from the offline databases into OneDrive Explorer. This data enhanced...

In case you missed it. New release of OneDriveExplorer. It has a dedicated parser for MicrosoftListSync.db (offline mode). #DFIR

malwaremaloney.blogspot.com/2025/09/oned...

Week 39 – 2025 Inside the Salesloft-Drift Breach: What It Means for SaaS & Identity SecurityIn this session, Permiso’s CTO will cover:- How attackers moved from GitHub → AWS → Salesforce using stolen OAuth to…

Week 39 - 2025 #DFIR
thisweekin4n6.com/2025/09/28/w...

S3:E9 // NOW That’s what I call iOS: 26 - Magnet Forensics Apple has hit the jump to light speed and jumped from iOS 18 to iOS 26! In this episode of Mobile Unpacked we’ll explore the new changes and challenges Apple’s yearly upgrade cycle is bringing to the ...

This week's #MobileUnpacked is going to be a big one! Join us as @cscottvance.bsky.social explores the brand-new #iOS26, including UX changes of #LiquidGlass, and updates to the Phone & Messages app that could have serious impacts. Save your spot now: ow.ly/zr8150X0bp7

Final Pre-Conference Notes for 2025 PancakesCon is this coming Sunday, the 21st of September (running into the 22nd for some of us!). It will start at 6AM Central US Time (Chicago), for a very good reason. No, I have not become a mor…

PancakesCon & @comfyconau.bsky.social are THIS SUNDAY, September 21st. Here are some final notes on how to make the most of virtual conferences and where to find useful information! pancakescon.com/2025/09/17/f...

The death of Robert Redford (RIP) means the window to rewatch Hackers in honor of the 30th anniversary has officially closed and it is now time to re-watch Sneakers. (Time to rewatch Sneakers will continue indefinitely.)

The new customizable Backup Option

A new UFADE Version is out! (github.com/prosch88/UFA...) New in 1.0.1:

Customizable backup functions,

The option to decrypt existing iTunes backups,

Interface improvements,

More consistent display on different platforms,

Includes the latest identifiers for the new iPhone and Apple Watch models

Happy 30th anniversary to Hackers!

If you’re cold, they’re cold. Bring them inside

YouTube video by 13Cubed AI vs. Windows Forensics

Happy 9/9! It's time for a new 13Cubed episode. 🎉 I'm sure you're as sick of hearing about AI as I am, but I have some thoughts... Let's talk about it. www.youtube.com/watch?v=lvkB... #DFIR

haha that's unfortunate, I'm sure it'll show up eventually. This happens often when I tuck something away in my desk then look for it months later

Guess who forgot his test phone password and now has to wipe it 🙃

Release v2.3.0 · abrignoni/iLEAPP iLEAPP v2.3.0 New features : Support of iTunes encrypted backups New Unified Logs artifacts Progress / status count to console output Improve media file lookup speed (~20x faster) New modules :...

Good news, iLEAPP v2.3.0 release is out, go grab it now!

github.com/abrignoni/iL...

#Stark4N6: Forensics StartMe Updates (9/1/2025) #DFIR www.stark4n6.com/2025/09/fore...

Got some vintage wax packs for fun

T-Shirts by stark4n6 | TeePublic Shop t-shirts, phone cases, hoodies, art prints and mugs created by independent artists from around the globe.

Another 35% off sale on the shop! #DFIR www.teepublic.com/user/stark4n6