🎉 It’s time for a new 13Cubed episode! We’ll briefly explore how process hollowing works and check out the relatively new windows.hollowprocesses plugin for Volatility 3. There are also two memory samples you can download for practice! www.youtube.com/watch?v=x5mG... #DFIR

Screaming into the void today
nullsec.us/i-wish-it-ne...

The argument for deterrence through vulnerability reduction has been favored as it allows for abdication of government responsibility & the transfer to private sector of task (& risks) of directly confronting hostile foreign military & intelligence services, something done in no other warfare domain

Happy New Year! 🎉🥳 The first 13Cubed episode of 2025 is here! Let's explore some groundbreaking research from CyberCX on “rewinding the NTFS USN Journal.” www.youtube.com/watch?v=GDc8... #DFIR

Ever since I was a wee lad, all I've wanted was an original physical copy of CSC-STD-002-85. Since I was disappointed yet again this year, I decided to make my own.

github.com/BeanBagKing/...

The XPlat Bundle includes:

-Investigating Windows Endpoints
-Investigating Windows Memory
-Investigating Linux Devices

Learn more about it here: training.13cubed.com/xplat-bundle

Happy New Year! I partnered with @13cubed.bsky.social for a giveaway of his XPlat training/certification Bundle!

To Enter: Like, Repost, and Leave a Comment

On January 12th, 1 winner will be chosen from LinkedIn and 1 winner will be chosen from Bluesky.

#DFIR #DigitalForensics #IncidentResponse