Kevin 🤖🕵️🍺

Forensics StartMe Updates (March 2026) Shortlink:  startme.stark4n6.com QR Code: If people have suggestions for additions please feel free to shoot me a message on the app formerl...

#Stark4N6: Forensics StartMe Updates (March 2026) #DFIR www.stark4n6.com/2026/03/fore...

I'm only on Windows... looks awesome

totally missed that, downloading now!

🆕 #Android Samsung #Knox (Secure Folder) history log artifact in #ALEAPP.
🪵 SQLite database contains a log of items requested be moved in or out of the secure folder in Samsung Android devices.
👏 Thanks to HSI Digital Forensics Examiner Geovanny Perez for the discovery of this artifact.

#DFIR

Will there be release builds or do I have to roll my own?

Starship.Zip Introducing Starship : Vector A fast, local dataset explorer built with Tauri, React, and DuckDB. Published here: https://github.com/MattETurner/Starship-Vector Compiled Releases: https://github.com/...

I just published Starship Vector! 🚀
An OS-independent + fast csv data explorer.
Built with: 🦀 Tauri 🎨 Tailwind CSS 🦆 DuckDB
I’d love for the DFIR community to check it out. I'm looking for feedback! www.starship.zip #DFIR #CyberSecurity #IncidentResponse #StarshipZip

Memory Analysis for #Linux has always been a bit hit-or-miss. Trail of Bits has released a tool called #mquire that doesn't require debug symbols for the originating Kernel.

#MemoryForensics #IncidentResponse #DFIR #DigitalForensics

Week 09 – 2026 Belkasoft X v2.10 Is Here—With Smarter AI Assistant- BelkaGPT now holds context—ask follow-up questions without restating your query- Import Magnet Axiom (.mfdb) cases directly for AI analysis- Sim…

Week 09 - 2026 #DFIR
thisweekin4n6.com/2026/03/01/w...

The Key to Switching Apps YouTube video by 13Cubed

🎉 It's time for a new 13Cubed episode! Learn about another obscure Registry-based execution artifact. www.youtube.com/watch?v=yoFk... #DFIR

he likes tech, but also... cats

Week 07 – 2026 No sponsor this week. If your organisation is interested, head over here to find out more. Atola TechnologyMaster Your Drives with MultiDrive BerlaEstablishing Occupant Actions & Invo…

Week 07 - 2026 #DFIR

thisweekin4n6.com/2026/02/15/w...

GitHub struggling this morning for anyone else?

who's piloting that fish haha, crazy

one reason to update your hardware too because the latest and greatest most likely won't be supported by a bunch of tools (at least from the Android side)

Forensics StartMe Updates (February 2026) Shortlink:  startme.stark4n6.com QR Code: If people have suggestions for additions please feel free to shoot me a message on the app formerl...

#Stark4N6: Forensics StartMe Updates (February 2026) #DFIR www.stark4n6.com/2026/02/fore...

Volatility New Release: #volatility3 v2.27.0 - visit github.com/volatilityfo... for details and downloads.

#memoryforensics #dfir

Where are people buying NVME storage from these days? Amazon has been basically wiped clean at this point

GitHub - tomchop/volatility3-autoruns: Autoruns plugin for the Volatility3 framework Autoruns plugin for the Volatility3 framework. Contribute to tomchop/volatility3-autoruns development by creating an account on GitHub.

I rarely post here, but when I do... I just updated my Volatility autoruns plugin to be compatible with Volatility 3 (long overdue!) Here's the goodies: github.com/tomchop/vola... #dfir #forensics #cybersecurity

Week 04 – 2026 No sponsor this week. If your organisation is interested, head over here to find out more. Digital Forensics Myanmar Network Action Predictor (Browser Forensic) SSD Recovery, Limitation a…

Week 04 - 2026 #DFIR
thisweekin4n6.com/2026/01/25/w...

Week 03 – 2026 BerlaConnecting Occupants to Vehicles Through Device Data Damien AttoeA Forensic Look at the Grok Android App Oleg Afonin at Elcomsoft Browser Forensics in 2026: App-Bound Encryption and Live Triag…

Week 03 - 2026 #DFIR
thisweekin4n6.com/2026/01/18/w...

X having another bad day I see

super proud of the two of you!

Week 02 – 2026 No sponsor this week. If your organisation is interested, head over here to find out more. Akash PatelCase Studies: Building Effective Timelines with Plaso (Log2Timeline) Christian Peter“Far over t…

Week 02 - 2026 #DFIR
thisweekin4n6.com/2026/01/11/w...

Finally certified! #GCFA

Apparently I've hit the "my knees hurt when the weather is bad" age

One blue screen of death a week is healthy right?!

Announcing Evanole Virtual Machine — Hexordia Over the years, we’ve given forensic training to thousands of students spanning all levels of expertise, from beginners just getting their start in forensics, to seasoned professionals looking to shar...

New resource from the team over at Hexordia, check out EvanoleVM now! #DFIR www.hexordia.com/blog/announc...

Forensics StartMe Updates (December 2025) Shortlink:  startme.stark4n6.com QR Code: If people have suggestions for additions please feel free to shoot me a message on the app formerl...

#Stark4N6: Forensics StartMe Updates (December 2025) #DFIR www.stark4n6.com/2025/12/fore...

Indexing time, IYKYK #FOR508