Thanks to a DoJ funded project, Oklahoma State University and @Hexordia are excited to offer a FREE On Demand IoT Forensics - Analyzong Smart Devices course to US Law Enforcement. The course is now available!!!
Please register here by Sept 30, 2025 for access bit.ly/IoT4n6OnDemand
#DFIR
Please register here by Sept 30, 2025 for access bit.ly/IoT4n6OnDemand
#DFIR
IoT On-Demand Interest Form
Sign up to be notified when the IoT On-Demand IoT Forensics Course launches later this year! With IoT technology deeply embedded in homes, businesses, and critical infrastructure, these devices are be...
bit.ly
August 18, 2025 at 2:59 PM
Thanks to a DoJ funded project, Oklahoma State University and @Hexordia are excited to offer a FREE On Demand IoT Forensics - Analyzong Smart Devices course to US Law Enforcement. The course is now available!!!
Please register here by Sept 30, 2025 for access bit.ly/IoT4n6OnDemand
#DFIR
Please register here by Sept 30, 2025 for access bit.ly/IoT4n6OnDemand
#DFIR
Check out our first episode of the #TruthInData podcast! Our topic this week: Evidence Gone: The Perils of Delayed Mobile Acquisition
youtu.be/vb0G-uLvwMM?...
With Debbie Garner & Kim Bradley #DFIR
youtu.be/vb0G-uLvwMM?...
With Debbie Garner & Kim Bradley #DFIR
Truth in Data: EP1: Evidence Gone: The Perils of Delayed Mobile Acquisition
YouTube video by Hexordia
youtu.be
April 8, 2025 at 11:54 AM
Check out our first episode of the #TruthInData podcast! Our topic this week: Evidence Gone: The Perils of Delayed Mobile Acquisition
youtu.be/vb0G-uLvwMM?...
With Debbie Garner & Kim Bradley #DFIR
youtu.be/vb0G-uLvwMM?...
With Debbie Garner & Kim Bradley #DFIR
So excited to collab with Debbie Garner and Kim Bradley on the #TruthInData podcast to bring a weekly deep dive into a different digital forensic topic each week! Subscribe to the Hexordia YouTube channel and never miss the conversation. #DFIR youtube.com/@hexordia
Hexordia
Mobile Forensics and Digital Forensics Training and Services #DFIR
youtube.com
April 7, 2025 at 10:08 PM
So excited to collab with Debbie Garner and Kim Bradley on the #TruthInData podcast to bring a weekly deep dive into a different digital forensic topic each week! Subscribe to the Hexordia YouTube channel and never miss the conversation. #DFIR youtube.com/@hexordia
Interesting paper from Hannes Spichiger & Hexordia’s Frank Adelstein on “Preserving meaning of evidence from evolving systems” - how do we test to ensure that we understand the meaning of data at the time it was created? #DFIR
www.sciencedirect.com/science/arti...
www.sciencedirect.com/science/arti...
Preserving meaning of evidence from evolving systems
Preservation is generally considered as the step in the forensic process that stops evidence from decaying. In this paper, we argue that the tradition…
www.sciencedirect.com
March 28, 2025 at 3:05 PM
Interesting paper from Hannes Spichiger & Hexordia’s Frank Adelstein on “Preserving meaning of evidence from evolving systems” - how do we test to ensure that we understand the meaning of data at the time it was created? #DFIR
www.sciencedirect.com/science/arti...
www.sciencedirect.com/science/arti...
Mobile evidence? Image as soon as you can!
Acquisition 👏 is 👏 Prervation
Check out Lars Daniel’s article to learn why! #DFIR
www.forbes.com/sites/larsda...
Acquisition 👏 is 👏 Prervation
Check out Lars Daniel’s article to learn why! #DFIR
www.forbes.com/sites/larsda...
Disappearing Evidence—Why Your Phone Can’t Wait For Forensics
Modern smartphone evidence vanishes fast. Preserve now or risk losing it forever.
www.forbes.com
March 24, 2025 at 2:24 PM
Mobile evidence? Image as soon as you can!
Acquisition 👏 is 👏 Prervation
Check out Lars Daniel’s article to learn why! #DFIR
www.forbes.com/sites/larsda...
Acquisition 👏 is 👏 Prervation
Check out Lars Daniel’s article to learn why! #DFIR
www.forbes.com/sites/larsda...
Thanks for catching up with me Forensic Focus!
Jessica Hyde shares updates on Hexordia, DFIR training, CTFs, and the importance of community collaboration in digital forensics. #digitalforensics
Jessica Hyde, Founder, Hexordia
Jessica Hyde shares updates on Hexordia, DFIR training, CTFs, and the importance of community collaboration in digital forensics.
www.forensicfocus.com
March 20, 2025 at 4:08 PM
Thanks for catching up with me Forensic Focus!
Acquisition 👏 is 👏 Preservation!
Without it we are loosing potentially Exculpatory and Inculpatory evidence.
#DFIR
www.forensicmag.com/3425-Feature...
Without it we are loosing potentially Exculpatory and Inculpatory evidence.
#DFIR
www.forensicmag.com/3425-Feature...
Data Preservation on Mobile Devices: The Quicker, The Better
Recent updates to mobile phone technology have changed the current playing field in terms of ensuring the most complete technology.
www.forensicmag.com
March 20, 2025 at 4:07 PM
Acquisition 👏 is 👏 Preservation!
Without it we are loosing potentially Exculpatory and Inculpatory evidence.
#DFIR
www.forensicmag.com/3425-Feature...
Without it we are loosing potentially Exculpatory and Inculpatory evidence.
#DFIR
www.forensicmag.com/3425-Feature...
Important must read position paper from Scientific Working Group on Digital Evidence (SWGDE) about the use of timely acquisition to preserve evidence. Mobile data has potential to degrade each day you wait to do an acquisition. #DFIR www.swgde.org/25-f-001/
www.swgde.org
March 11, 2025 at 12:41 PM
Important must read position paper from Scientific Working Group on Digital Evidence (SWGDE) about the use of timely acquisition to preserve evidence. Mobile data has potential to degrade each day you wait to do an acquisition. #DFIR www.swgde.org/25-f-001/
Missed the @magnetforensics.bsky.social Virtual Summit #CTF but want the images for testing and learning? We have already shared them with @nist.bsky.social CFReDS cfreds.nist.gov/all/Hexordia...
CFReDS Portal
cfreds.nist.gov
February 18, 2025 at 3:46 PM
Missed the @magnetforensics.bsky.social Virtual Summit #CTF but want the images for testing and learning? We have already shared them with @nist.bsky.social CFReDS cfreds.nist.gov/all/Hexordia...
Reposted by Jessica Hyde
Many thanks to Magnet Forensics, Hexordia, and the CTF authors for this great experience! Glad the timing worked out that I was able to participate - really enjoyable, creative, and challenging. Still may go back and look at some more of these questions..
Congratulations to the winners of the Magnet Forensic Virtual Summit 2025 CTF powered by Hexordia
1st place: @deagler
2nd Place: @Cognitor4n6
3rd Place: @Potato
1st Place Team: @X
Still time to play for the First to Finish!
#MVS2025CTF #DFIR
1st place: @deagler
2nd Place: @Cognitor4n6
3rd Place: @Potato
1st Place Team: @X
Still time to play for the First to Finish!
#MVS2025CTF #DFIR
February 13, 2025 at 11:19 PM
Many thanks to Magnet Forensics, Hexordia, and the CTF authors for this great experience! Glad the timing worked out that I was able to participate - really enjoyable, creative, and challenging. Still may go back and look at some more of these questions..
Congratulations to the winners of the Magnet Forensic Virtual Summit 2025 CTF powered by Hexordia
1st place: @deagler
2nd Place: @Cognitor4n6
3rd Place: @Potato
1st Place Team: @X
Still time to play for the First to Finish!
#MVS2025CTF #DFIR
1st place: @deagler
2nd Place: @Cognitor4n6
3rd Place: @Potato
1st Place Team: @X
Still time to play for the First to Finish!
#MVS2025CTF #DFIR
February 13, 2025 at 8:31 PM
Congratulations to the winners of the Magnet Forensic Virtual Summit 2025 CTF powered by Hexordia
1st place: @deagler
2nd Place: @Cognitor4n6
3rd Place: @Potato
1st Place Team: @X
Still time to play for the First to Finish!
#MVS2025CTF #DFIR
1st place: @deagler
2nd Place: @Cognitor4n6
3rd Place: @Potato
1st Place Team: @X
Still time to play for the First to Finish!
#MVS2025CTF #DFIR
Sometimes you need to deal with data from a protocol buffer. Here are some tools to help! #DFIR
github.com/protocolbuff...
github.com/mildsunrise/...
www.cclsolutionsgroup.com/forensic-pro... (Grab a 30 day trial of this - it does SO MUCH more!)
github.com/protocolbuff...
github.com/mildsunrise/...
www.cclsolutionsgroup.com/forensic-pro... (Grab a 30 day trial of this - it does SO MUCH more!)
GitHub - protocolbuffers/protobuf: Protocol Buffers - Google's data interchange format
Protocol Buffers - Google's data interchange format - protocolbuffers/protobuf
github.com
February 13, 2025 at 1:18 AM
Sometimes you need to deal with data from a protocol buffer. Here are some tools to help! #DFIR
github.com/protocolbuff...
github.com/mildsunrise/...
www.cclsolutionsgroup.com/forensic-pro... (Grab a 30 day trial of this - it does SO MUCH more!)
github.com/protocolbuff...
github.com/mildsunrise/...
www.cclsolutionsgroup.com/forensic-pro... (Grab a 30 day trial of this - it does SO MUCH more!)
Looking for a good source of forensic tools, blogs, and cheat sheets? Check out @stark4n6.bsky.social Forensic Start Me #DFIR
start.me/p/q6mw4Q/for...
start.me/p/q6mw4Q/for...
Forensics - start.me
A startpage with online resources about Forensics, created by Stark 4N6.
start.me
February 12, 2025 at 12:17 AM
Looking for a good source of forensic tools, blogs, and cheat sheets? Check out @stark4n6.bsky.social Forensic Start Me #DFIR
start.me/p/q6mw4Q/for...
start.me/p/q6mw4Q/for...
Want to break down what is in a URL? Try Unfurl from Ryan Benson and gain further insights! dfir.blog/unfurl/
#DFIR
#DFIR
unfurl
Extract and Visualized Data from URLs
dfir.blog
February 10, 2025 at 11:42 AM
Want to break down what is in a URL? Try Unfurl from Ryan Benson and gain further insights! dfir.blog/unfurl/
#DFIR
#DFIR
#DFIR 💭 of the Day: Consensus based documents are important to our field.
SWGDE is constantly working on development of standards Feeling left out of the current meeting, several draft documents are in the public comment period. Consider reading and submitting comments www.swgde.org/documents/dr...
SWGDE is constantly working on development of standards Feeling left out of the current meeting, several draft documents are in the public comment period. Consider reading and submitting comments www.swgde.org/documents/dr...
Drafts Released For Comment - SWGDE
Drafts Released For Comment SWGDE encourages stakeholder participation in the preparation of documents. The following documents are draft versions being provided for comment by all interested parties ...
www.swgde.org
January 15, 2025 at 10:54 AM
#DFIR 💭 of the Day: Consensus based documents are important to our field.
SWGDE is constantly working on development of standards Feeling left out of the current meeting, several draft documents are in the public comment period. Consider reading and submitting comments www.swgde.org/documents/dr...
SWGDE is constantly working on development of standards Feeling left out of the current meeting, several draft documents are in the public comment period. Consider reading and submitting comments www.swgde.org/documents/dr...
#DFIR 💭 of the Day: playing a #CTF as a team can elevate your labs skills
This year the @MagnetForensics DFIR CTF allows for team or solo play! Great opportunity for your team to
work together to solve challenges helping your lab level up! www.hexordia.com/blog/play-ctf
This year the @MagnetForensics DFIR CTF allows for team or solo play! Great opportunity for your team to
work together to solve challenges helping your lab level up! www.hexordia.com/blog/play-ctf
Magnet Virtual Summit CTF Powered by Hexordia: Elevate Your Digital Forensics Skills! — Hexordia
Why Participate in the Magnet Virtual Summit CTF Powered by Hexordia? The Magnet Virtual Summit CTF Powered by Hexordia is a fantastic opportunity to: Level Up Your Skills: Tackle challenging p...
www.hexordia.com
January 7, 2025 at 3:51 PM
#DFIR 💭 of the Day: playing a #CTF as a team can elevate your labs skills
This year the @MagnetForensics DFIR CTF allows for team or solo play! Great opportunity for your team to
work together to solve challenges helping your lab level up! www.hexordia.com/blog/play-ctf
This year the @MagnetForensics DFIR CTF allows for team or solo play! Great opportunity for your team to
work together to solve challenges helping your lab level up! www.hexordia.com/blog/play-ctf
#DFIR 💭 of the Day: Challenges keep your skills sharp for solving unknowns
How do you train and prepare for things you don’t expect? You learn *how* to test & understand artifacts Check out the Sunday Funday from @HECFBlog www.hecfblog.com/2025/01/dail...
How do you train and prepare for things you don’t expect? You learn *how* to test & understand artifacts Check out the Sunday Funday from @HECFBlog www.hecfblog.com/2025/01/dail...
Daily Blog #709: Sunday Funday 1/5/25 Entra ID and Bloodhound
www.hecfblog.com
January 5, 2025 at 10:33 PM
#DFIR 💭 of the Day: Challenges keep your skills sharp for solving unknowns
How do you train and prepare for things you don’t expect? You learn *how* to test & understand artifacts Check out the Sunday Funday from @HECFBlog www.hecfblog.com/2025/01/dail...
How do you train and prepare for things you don’t expect? You learn *how* to test & understand artifacts Check out the Sunday Funday from @HECFBlog www.hecfblog.com/2025/01/dail...
DFIR 💭 of the Day: It is important for practitioners and academics to collaborate
The intersection allows for academics to understand practitioner issues to inform research and for practitioners to be aware of advancements in the science of Digital Forensics.
The intersection allows for academics to understand practitioner issues to inform research and for practitioners to be aware of advancements in the science of Digital Forensics.
January 2, 2025 at 11:24 PM
DFIR 💭 of the Day: It is important for practitioners and academics to collaborate
The intersection allows for academics to understand practitioner issues to inform research and for practitioners to be aware of advancements in the science of Digital Forensics.
The intersection allows for academics to understand practitioner issues to inform research and for practitioners to be aware of advancements in the science of Digital Forensics.
#DFIR 💭 of the day: it is critical that Legal Professionals understand digital evidence
While digital forensics professionals are there to give meaning and detailed analysis, legal professionals still need education. Great content at the Magnet Forensics User Summit! magnetusersummit.com/passes/
While digital forensics professionals are there to give meaning and detailed analysis, legal professionals still need education. Great content at the Magnet Forensics User Summit! magnetusersummit.com/passes/
Don't miss the DFIR event of the year
Magnet User Summit 2025, March 17-19, 2025, Nashville, TN. Explore Magnet Forensics solutions and the future of DFIR in this three-day event. Register today at www.magnetusersummit.com.
magnetusersummit.com
December 29, 2024 at 1:03 PM
#DFIR 💭 of the day: it is critical that Legal Professionals understand digital evidence
While digital forensics professionals are there to give meaning and detailed analysis, legal professionals still need education. Great content at the Magnet Forensics User Summit! magnetusersummit.com/passes/
While digital forensics professionals are there to give meaning and detailed analysis, legal professionals still need education. Great content at the Magnet Forensics User Summit! magnetusersummit.com/passes/
#DFIR 💭 of the day: Our digital devices are noisy, even when we aren’t using them.
It is incredible how much happens in the background of these devices. Looking at live logs is incredibly helpful when researching how data is stored in historical logs! youtu.be/JAcvwbpJ4gA
It is incredible how much happens in the background of these devices. Looking at live logs is incredibly helpful when researching how data is stored in historical logs! youtu.be/JAcvwbpJ4gA
Dormant Devices, Chatty Logs: Extracting Forensic Artifacts from Seemingly Idle iOS Devices
YouTube video by SANS Digital Forensics and Incident Response
youtu.be
December 27, 2024 at 5:23 PM
#DFIR 💭 of the day: Our digital devices are noisy, even when we aren’t using them.
It is incredible how much happens in the background of these devices. Looking at live logs is incredibly helpful when researching how data is stored in historical logs! youtu.be/JAcvwbpJ4gA
It is incredible how much happens in the background of these devices. Looking at live logs is incredibly helpful when researching how data is stored in historical logs! youtu.be/JAcvwbpJ4gA
#DFIR 💭 of the day: Standards bodies need YOUR participation!
Did you know that documents from groups like Scientific Working Group on Digital Evidence (SWGDE) and NIST OSAC go out for a public comment period?
There are documents open for draft comments right now! www.swgde.org/documents/dr...
Did you know that documents from groups like Scientific Working Group on Digital Evidence (SWGDE) and NIST OSAC go out for a public comment period?
There are documents open for draft comments right now! www.swgde.org/documents/dr...
Drafts Released For Comment - Swgde
Drafts Released For Comment SWGDE encourages stakeholder participation in the preparation of documents. The following documents are draft versions being provided for comment by all interested parties ...
www.swgde.org
December 24, 2024 at 11:48 AM
#DFIR 💭 of the day: Standards bodies need YOUR participation!
Did you know that documents from groups like Scientific Working Group on Digital Evidence (SWGDE) and NIST OSAC go out for a public comment period?
There are documents open for draft comments right now! www.swgde.org/documents/dr...
Did you know that documents from groups like Scientific Working Group on Digital Evidence (SWGDE) and NIST OSAC go out for a public comment period?
There are documents open for draft comments right now! www.swgde.org/documents/dr...
#DFIR 💭 of the day: Document your achievements WEEKLY!
You’re learning & doing new things daily! You need to track. Keep a list & update it with your achievements (small or big) weekly. This helps at review time
Monthly move applicable items to your CV and resume. Your CV is a LIVING document.
You’re learning & doing new things daily! You need to track. Keep a list & update it with your achievements (small or big) weekly. This helps at review time
Monthly move applicable items to your CV and resume. Your CV is a LIVING document.
December 24, 2024 at 11:47 AM
#DFIR 💭 of the day: Document your achievements WEEKLY!
You’re learning & doing new things daily! You need to track. Keep a list & update it with your achievements (small or big) weekly. This helps at review time
Monthly move applicable items to your CV and resume. Your CV is a LIVING document.
You’re learning & doing new things daily! You need to track. Keep a list & update it with your achievements (small or big) weekly. This helps at review time
Monthly move applicable items to your CV and resume. Your CV is a LIVING document.
#DFIR 💭 of the day: breaking into DFIR requires practice.
On school break? Keep learning!
Check out DFIR Diva at dfirdiva.com
Sign up for the @MagnetForensics Virtual Summit #CTF for hands on practice magnetvirtualsummit.com/capture-the-...
On school break? Keep learning!
Check out DFIR Diva at dfirdiva.com
Sign up for the @MagnetForensics Virtual Summit #CTF for hands on practice magnetvirtualsummit.com/capture-the-...
Digital Forensics & Incident Response Blog Geared Toward Beginners
Digital Forensics & Incident Response Blog Geared Toward Beginners. Free & Affordable Training, Resources, DFIR, OSINT & Cybersecurity Community Events.
dfirdiva.com
December 22, 2024 at 4:34 PM
#DFIR 💭 of the day: breaking into DFIR requires practice.
On school break? Keep learning!
Check out DFIR Diva at dfirdiva.com
Sign up for the @MagnetForensics Virtual Summit #CTF for hands on practice magnetvirtualsummit.com/capture-the-...
On school break? Keep learning!
Check out DFIR Diva at dfirdiva.com
Sign up for the @MagnetForensics Virtual Summit #CTF for hands on practice magnetvirtualsummit.com/capture-the-...