Doug Metz
@dwmetz.bsky.social
#DFIR @ Magnet Forensics
Blog ✍️ @ BakerStreetForensics.com
Opinions are my own and are subject to change.
Blog ✍️ @ BakerStreetForensics.com
Opinions are my own and are subject to change.
A MalChela 🦀 sighting in the wild
July 22, 2025 at 3:05 PM
A MalChela 🦀 sighting in the wild
Still a work in progress but very happy with my GaZendo (gazebo/zendo) so far…
June 23, 2025 at 12:58 AM
Still a work in progress but very happy with my GaZendo (gazebo/zendo) so far…
I’ve been working on improving the 3rd party integrations with MalChela (the updated release is coming soon). To really test the capabilities, I’ve been working through a bunch of the static analysis labs from FOR610.
May 2, 2025 at 2:40 AM
I’ve been working on improving the 3rd party integrations with MalChela (the updated release is coming soon). To really test the capabilities, I’ve been working through a bunch of the static analysis labs from FOR610.
It never ceases to amuse me when I wear this t-shirt and someone compliments it… then proceeds to tell me about their psychedelic experiences in the ‘80’s.
April 27, 2025 at 6:00 PM
It never ceases to amuse me when I wear this t-shirt and someone compliments it… then proceeds to tell me about their psychedelic experiences in the ‘80’s.
Sharing for the night crew. The MalChela YARA & Malware Analysis toolkit now has a GUI. But there’s much more than that. An updated fileanalyzer module, 15 new detections in mstrings and 3rd party tool integrations.
GitHub: github.com/dwmetz/MalCh...
Blog: bakerstreetforensics.com/2025/04/25/m...
GitHub: github.com/dwmetz/MalCh...
Blog: bakerstreetforensics.com/2025/04/25/m...
April 26, 2025 at 1:48 AM
Sharing for the night crew. The MalChela YARA & Malware Analysis toolkit now has a GUI. But there’s much more than that. An updated fileanalyzer module, 15 new detections in mstrings and 3rd party tool integrations.
GitHub: github.com/dwmetz/MalCh...
Blog: bakerstreetforensics.com/2025/04/25/m...
GitHub: github.com/dwmetz/MalCh...
Blog: bakerstreetforensics.com/2025/04/25/m...
For fun I decided to run mStrings against an old WannaCry sample. Network IOC results were spot on! github.com/dwmetz/MalCh... #DFIR #MalwareAnalysis #Rust #MalChela
March 12, 2025 at 1:01 PM
For fun I decided to run mStrings against an old WannaCry sample. Network IOC results were spot on! github.com/dwmetz/MalCh... #DFIR #MalwareAnalysis #Rust #MalChela
Added a function to MalChela to check for available updates. But you have to update first before the update function works. 🤣 #MalwareAnalysis #Rust #DFIR
March 9, 2025 at 7:25 PM
Added a function to MalChela to check for available updates. But you have to update first before the update function works. 🤣 #MalwareAnalysis #Rust #DFIR
March 2, 2025 at 1:01 AM
Overwhelming case load? A never ending queue of incidents? Need to reboot your mental health? Come join me at the Magnet Virtual Summit as I bring together two of my passions, Zen & the Art of Digital Forensics: Enhancing Insight Through Mindfulness. magnetvirtualsummit.com #DFIR #Zen
February 13, 2025 at 2:39 AM
Overwhelming case load? A never ending queue of incidents? Need to reboot your mental health? Come join me at the Magnet Virtual Summit as I bring together two of my passions, Zen & the Art of Digital Forensics: Enhancing Insight Through Mindfulness. magnetvirtualsummit.com #DFIR #Zen
I’ve already set myself up with a nice portable station for practicing. If you’ve got any recommendations on beginner resources I’d love to hear them.
December 15, 2024 at 6:51 PM
I’ve already set myself up with a nice portable station for practicing. If you’ve got any recommendations on beginner resources I’d love to hear them.
It’s been chilly in the office so I brought in the electric fireplace. Someone wasted no time in taking advantage of the coziness.
December 6, 2024 at 7:55 PM
It’s been chilly in the office so I brought in the electric fireplace. Someone wasted no time in taking advantage of the coziness.
I wasn’t expecting this in the Google news feed this morning. 🪦
November 21, 2024 at 1:23 PM
I wasn’t expecting this in the Google news feed this morning. 🪦
As a way to introduce myself, I’d like to share one of my favorite #DIY projects, the #LackRack. This setup began with four Ikea end tables and has since evolved. This is the center of my #DFIR and #MalwareAnalysis lab. Like me it’s a little bit #Steampunk and a whole lotta nerd.
November 20, 2024 at 1:42 PM
As a way to introduce myself, I’d like to share one of my favorite #DIY projects, the #LackRack. This setup began with four Ikea end tables and has since evolved. This is the center of my #DFIR and #MalwareAnalysis lab. Like me it’s a little bit #Steampunk and a whole lotta nerd.