Digital Forensic Science

09/13/2022

Free mini-course on getting started with Velociraptor IR ! An endpoint visibility tool for full . There are SO many features.

Rapid7

Velociraptor IR (Incident Response) is an open-source endpoint visibility tool. You can monitor many clients across networks, conduct hunts on all clients, o...

09/09/2022

Tutorial on Velociraptor IR - get access to the mini-course now by supporting us on Patreon.
Your support helps translate tutorials into other languages to reach more investigators worldwide.

Join DFIRScience on Patreon to get access to this post and more benefits.

09/08/2022

Winners were selected for the giveaway! Thanks for checking out our talk on forensics in the military (https://youtu.be/ZGvyThzafJE). More chances to win coming soon!

08/17/2022

Want to learn about digital forensics in the military? Andrew Lister talks career pathway from military to private sector

✨Sign up for a chance to win prizes✨ https://forms.gle/vAhy7NFfei5ZVuLy8


https://youtu.be/ZGvyThzafJE

Win Prizes! Take the quiz here: https://forms.gle/vAhy7NFfei5ZVuLy8 (open until 2022-08-19)We often talk about digital forensics in criminal and civil invest...

08/16/2022

As soon as Summit Day 2 ends, join and I Beg to DFIR () as we talk about the awards and what's next in forensics!

Come hang out with the nominees for the Forensic 4:Cast "Best DFIR Show of the Year": 13Cubed, I Beg to DFIR, and DFIR Science!We will have a chat immediatel...

08/16/2022

What is in RAM?

Random Access Memory forensics starts with acquiring RAM from a live (turned on) system. There are several ways to collect the contents of RAM from a compute...

07/28/2022

Windows and Linux authentication bypass with the new Arsenal Image Mounter 3.9. Virtual DD, LVM support, and a whole lot more added. Great job Arsenal Recon

This video is not sponsored, just cool features. Arsenal Image Mounter 3.9 is out and has a lot of new features. You need to check out three features: Window...

07/26/2022

Random Access Memory can contain a lot of user-activity-related evidence. Let's take a look at the uses of RAM in https://youtu.be/7CqWBw6aOrs

Don't forget 50% of RAM analysis course until Aug. 1st.
https://learn.dfir.science/courses/RAM-Forensics-Tutorial?coupon=RAMMASTER50

Random Access Memory forensics starts with acquiring RAM from a live (turned on) system. There are several ways to collect the contents of RAM from a compute...

07/22/2022

We just released our first online course! How to Collect and Analyze Random Access Memory. See how useful RAM can be in your investigations. Check it out now and get 50% off until August 1st.

https://learn.dfir.science/courses/RAM-Forensics-Tutorial?coupon=RAMMASTER50

Random Access Memory (RAM) is a core component of almost all digital devices, but digital investigators rarely collect and investigate this data source. Learn how to get more and better evidence with RAM forensic analysis.

07/22/2022

Only two days left! Please vote for DFIR Science Forensic 4cast "DFIR Show of the Year"!
https://forms.gle/nRDGNP2qeEVPPyPj6

07/15/2022

DFIR Science was nominated for the 2022 Forensic 4:cast awards! ✨THANK YOU! ✨ 🤯🥳🥳


Now in the top 3 - please vote for the finalist!

The DFIR Science YouTube channel was nominated for the 2022 Forensic 4:cast Awards under “DFIR Show of the Year”!

06/15/2022

Speed up password cracking by generating targeted wordlists from RAM. A quick tutorial.

Password cracking often takes a long time. Brute force is normally your last option. But before that wordlist usually helps guess the password faster.Popular...