Have you considered building WinFE on Arm (a/k/a ARMWinFE) or perhaps tried, but were unsuccessful? Check out the first draft of our guide "Using Windows x64 to Build ARMWinFE with AIM Remote Agent." ArsenalRecon.com#DFIR
Check out the first draft of our guide "Using Windows x64 to Build IntelWinFE with AIM Remote Agent" & please let us know if you have any suggestions! ArsenalRecon.com#DFIR
Did you know that the latest Arsenal Image Mounter exposes BitLocker metadata in Free Mode that is unavailable from manage-bde & elsewhere? Check out these screenshots to see some examples made possible by our new BitLocker library. ArsenalRecon.com#DFIR
Arsenal Image Mounter v3.13.368 just released with even more powerful & unique BitLocker functionality (Free & Professional Modes!) thanks to a new BitLocker library developed by Joakim Schicht & many late nights from Olof Lagerkvist. ArsenalRecon.com#DFIR
Attribution is not just finding evidence.
↳ It is explaining what the evidence supports, what it does not support, and what alternative explanations remain.
↳ Live, online training: June 24, 1 PM MDT. $5 registration. suspectbehindthekeyboard.com/offers/nFCYqLuF#DFIR
Practical DFIR + AI workshop tomorrow (May 22) at 11AM Mountain.
Replay included. PDF Edition of DFIR Investigative Mindset also included.
Registration closes tomorrow at start of workshop.
suspectbehindthekeyboard.com/forensics-firs…#DFIR
Practical DFIR + AI workshop tomorrow (May 22) at 11AM Mountain.
Replay included. PDF Edition of DFIR Investigative Mindset also included.
Registration closes tomorrow at start of workshop.
suspectbehindthekeyboard.com/forensics-firs…#DFIR
AI Found It. You Prove It.
Forensics first. AI second.
90 minutes. 90-day replay. PDF edition of DFIR Investigative Mindset included.
Registration closes tomorrow at the start of the workshop: May 22. 11AM Mountain time.
AI can help find things. You still have to prove them.
Register here:
suspectbehindthekeyboard.com/forensics-firs…#DFIR
Want the foundation in keeping your value against AI? With your registration, you get a PDF version of my book, DFIR Investigative Mindset.
Registration ends at 11AM MDT, May 22.
suspectbehindthekeyboard.com/forensics-firs…
If AI can summarize your report, draft your timeline, and explain your artifacts faster than you, how much longer will you be paid to do DFIR?
90-minute live workshop tomorrow.
AI Found It. You Prove It.
11am Mountain time
90 day replay. Registration closes tomorrow.
Register: suspectbehindthekeyboard.com/forensics-firs…#DFIR
1K Followers 2K FollowingU.S. Federal Platform Consultant @ Magnet Forensics. Marine Corps Cyber Aux team. Marine Corps Veteran. Former Detective 🕵️♂️ Opinions are my own 👨🏼💻
776 Followers 593 FollowingRichmond, VA #RVA Director of Digital Forensics, writer, trainer in #dfir & Active Attack Response, former LE. Motorcycler & traveler. Opinions = my own.
11K Followers 428 FollowingBelkasoft is a global leader in digital forensics technology, known for their sound and comprehensive forensic tools used in 130+ countries all over the world.
3K Followers 742 FollowingHusband, Father, #DFIR @ Unit 42, Digital Forensics Discord Admin, AboutDFIR Contributor, Author, #USMC Veteran, Former LE, NHL Fan, Dark Mode, Animals, Music
3K Followers 1K FollowingDevelopers of digital forensics weapons which include Arsenal Image Mounter, Hibernation Recon, LevelDB Recon, HBIN Recon, & Registry Recon. Arm Yourself! #DFIR
819 Followers 911 FollowingDad of 3, 🚲 , 🎣 , 🏃♂️ and love the outdoors and bit of 4n6, former🇨🇦🚔 @ottawapolice, now @Cellebrite Head of Customer Engagement. Opinions are my own
141 Followers 1K FollowingBeginner in Cybersecurity✨, New-born Python developer🤟🏾, Otaku since the beginning💖... Just another random working to become the greatest 🎶☄️㊙️
674 Followers 396 FollowingIT since the Jurassic Era, Technology addicted, Security Passionate, always looking to learn new things. All I write are only My personal Opinions
3K Followers 1K FollowingDevelopers of digital forensics weapons which include Arsenal Image Mounter, Hibernation Recon, LevelDB Recon, HBIN Recon, & Registry Recon. Arm Yourself! #DFIR