DFIR Diva

Congrats to the winners of the @13cubed.bsky.social Valentine's Day Giveaway! 🎉

🏆 geekypanda411 - T-Shirt and Investigating macOS Endpoints course
👕 bmmaloney97 - T-Shirt
👕 Brian Randel M. - T-Shirt
👕 Viktor S. - T-Shirt
👕 Amr Khaled - T-Shirt
👕 Roberto Orozco - T-Shirt

On Valentine's Day (February 14th, 2026) entries from across three social media platforms will be combined and winners will be selected.

For more info check out:

13Cubed Courses: training.13cubed.com

Certification Information: training.13cubed.com/certifications

T-Shirts: shop.13cubed.com

Courses to Choose From:
- Investigating Windows Endpoints
- Investigating Windows Memory
- Investigating macOS Endpoints
- Investigating Linux Devices

To Enter:
✅ Like
✅ Comment with the name of the course you want to win
✅ Repost

📣 I partnered with @13cubed.bsky.social for a Valentine's Day Giveaway! 🎁

🏆1 Grand Prize winner will receive one course of their choice from the list below + a 13Cubed Investigator T-Shirt.

👕5 winners will receive a 13Cubed Investigator T-Shirt.

Congrats to the @13cubed.bsky.social giveaway winners!

XPlat Bundle Complete Master cross-platform forensics with our most comprehensive bundle. Enjoy 365-day access to Investigating Windows Endpoints, Investigating Windows Memory, Investigating Linux Devices, and Investigatin...

On December 7th, entries from across three social media platforms will be combined and winners will be selected.

For more info check out:

XPlat Bundle Complete: training.13cubed.com/xplat-bundle...

Certification Information: training.13cubed.com/certifications

T-Shirts: shop.13cubed.com

13Cubed XPlat Bundle and T-Shirt giveaway.

📢 I partnered with @13cubed.bsky.social for another giveaway! 🎁

🏆 1 winner will receive a 13Cubed Investigator T-Shirt + the XPlat Bundle Complete

👕 5 winners will receive 13Cubed Investigator T-Shirts

To Enter: Like, Comment, and Repost

#DFIR #DigitalForensics #IncidentResponse

HTB Holmes CTF 2025

Hack The Box is hosting their first all Blue CTF next month!

Dates: September 22nd - 26th

Form a team and compete for prizes 🏆

Challenges Include:
- DFIR
- SOC
- Malware Reversing
- Threat Intelligence

Link: ctf.hackthebox.com/event/detail...

Week 17 – 2025 Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash Patel Understanding Rootkits: …

Week 17 - 2025 #DFIR
thisweekin4n6.com/2025/04/27/w...

YouTube video by Doug Metz MalChela GUI Walk through

I recorded a brief video, walking through some of the different functions in MalChela in the new GUI, stepping through basic static analysis to yara rule writing - all in minutes.

youtu.be/hI1EqojI1DA

#DFIR #MalwareAnalysis #YARA #MITRE #Rust

MalChela: github.com/dwmetz/MalCh...

This is an interesting write up on a slightly different #Docker #container #malware attack from the Cado Security and Darktrace teams.

🔗 www.darktrace.com/blog/obfusca...

C5W-100 INTRODUCTION TO DIGITAL FORENSICS

Interested in learning about #DFIR and don't know where to start? Then we highly recommend you check out our full "C5W-100 - Introduction to Digital Forensics" course. It is completely FREE and it should help you get started. #infosec #cybersecurity

academy.cyber5w.com/courses/C5W-...

🐍 SLEUTHCON is coming! 🐍

Registration and CFP are now open for this year’s SLEUTHCON—happening June 6th, both in-person in Arlington, VA, and virtually.

www.sleuthcon.com

1/x

Hindsight v2025.03 Released! Hindsight v2025.03 focuses on Extensions - parsing more activity and state records, highlighting Extension permissions, and making it easier to examine Manifests.

There's a new Hindsight release!

Hindsight v2025.03 focuses on Extensions - parsing more activity and state records, highlighting Extension permissions, and making it easier to examine Manifests.

🌐 Blog: dfir.blog/hindsight-pa...
🛠️ Tool download: hindsig.ht/release

#DFIR #Chrome #Extensions

Autopsy - Autopsy 4.22.0: BitLocker Support, Cyber Triage Sidecar, Library Updates Autopsy 4.22.0 includes BitLocker support, ability to run alongside Cyber Triage, and updates to lower-level libraries.

New Autopsy release is out! 🎉

It's been a minute, but it's out. Notable features are BitLocker support and it can run side-by-side with Cyber Triage. Plus, a bunch of library updates.

Now Cyber Triage and Autopsy can be used on the same case at the same time!

www.autopsy.com/autopsy-4-22...

Free & Affordable Training News Monthly: Feb - Mar 2025 Newly released Digital Forensics, Incident Response, Malware Analysis and OSINT training, tools, and books from February 2025. Upcoming events for March.

New Blog Post! Free & Affordable Training News Monthly: Feb - Mar 2025

- Newly released DFIR, OSINT, and Malware Analysis training, tools, and books from February 2025

- Upcoming events for March 2025

Link: dfirdiva.com/free-afforda...

#DFIR #IncidentResponse #MalwareAnalysis #OSINT

DFIR & Blue Team Certifications + Training Under $1,000 - Free & Affordable DFIR, OSINT, & Cybersecurity Training Digital Forensics & Incident Response (DFIR) and Blue Team Certifications with Training Included Under $1,000

I noticed the DFIR & Blue Team Certifications + Training for under $1,000 section had a lot of broken links. They've been fixed 🙂

training.dfirdiva.com/listing-cate...

#DFIR

Missed the @magnetforensics.bsky.social Virtual Summit #CTF but want the images for testing and learning? We have already shared them with @nist.bsky.social CFReDS cfreds.nist.gov/all/Hexordia...

New #iLEAPP 2.1.0 release is out! #DFIR github.com/abrignoni/iL...

Humble Tech Book Bundle: Ultimate Cybersecurity Career by Packt Jump-start your exciting new cybersecurity career with this outstanding library of tech courses. Pay what you want & support World Central Kitchen!

Ultimate Cybersecurity Career Humble Bundle!

Includes:
- Incident Response for Windows
- The OSINT Handbook
- Effective Threat Investigation for SOC Analysts
and more!

Link: humblebundleinc.sjv.io/kOaeod

(Partner Link)

#DFIR #IncidentResponse #MalwareAnalysis #Cybersecurity #OSINT

DFIR Giveaway! You could win:

✅A FREE @detegoglobal.bsky.social Digital Forensics & Cyber Crime Investigations course worth $399 each

✅Detego merch pack

✅‘Force of Justus’ crime novel

Enter here: detegoglobal.com/dfirdiva

THREE winners will be announced March 10th, 2025!

#DFIR

Free & Affordable Training News Monthly: Dec 2024 - Feb 2025

- Newly released DFIR, OSINT, and Malware Analysis training, tools, and books from Dec 2024 & Jan 2025

- Upcoming CTFs and training for February, 2025

Link: dfirdiva.com/free-amp-aff...

#DFIR #IncidentResponse #MalwareAnalysis #OSINT

The winner of the @13cubed.bsky.social XPlat Bundle is @dfirjw.bsky.social! Congrats!

XPlat Bundle Master XPlat (cross-platform) Windows and Linux forensic investigation with the ultimate bundle: 365-day access to Investigating Windows Endpoints, Investigating Windows Memory, and Investigating Linu...

The XPlat Bundle includes:

-Investigating Windows Endpoints
-Investigating Windows Memory
-Investigating Linux Devices

Learn more about it here: training.13cubed.com/xplat-bundle

13Cubed XPlat Bundle Giveaway

Happy New Year! I partnered with @13cubed.bsky.social for a giveaway of his XPlat training/certification Bundle!

To Enter: Like, Repost, and Leave a Comment

On January 12th, 1 winner will be chosen from LinkedIn and 1 winner will be chosen from Bluesky.

#DFIR #DigitalForensics #IncidentResponse

"Mastering Sysmon: Deploying, Configuring, and Fine-Tuning"
A free mini eBook for #DFIR professionals with practical steps to deploy, fine-tune, and start logging with Sysmon.

dfirinsights.com/2024/11/27/m...

#infosec #blueteam

PSST: our 1-day OSINT 101 (for beginners) class is free!

academy.plessas.net/offers/iFJiA...

I have 76 feeds in this list. Next week I will add more podcasts, but if I am missing important blogs (and I KNOW I am), give me a hand. Don't be shy - post your own blogs too. #OSINT

knowledgebase.plessas.net/OSINT-Feeds-...

Just a heads up. M$ is OCRing all your images in OneDrive for business in an unsecured database on your desktop/laptop. Happy Friday. #DFIR

YouTube video by OSINT Dojo #OSINT Challenge: Blue City Sign

We uploaded a new #OSINT challenge for you to try your hand at. Can you identify the Latitude and Longitude of where this photo was taken?
www.youtube.com/shorts/6iYuE...