Digital Forensic Science

Free mini-course on getting started with Velociraptor IR ! An endpoint visibility tool for full . There are SO many features.

Rapid7

Starting with Velociraptor Incident Response Velociraptor IR (Incident Response) is an open-source endpoint visibility tool. You can monitor many clients across networks, conduct hunts on all clients, o...

Tutorial on Velociraptor IR - get access to the mini-course now by supporting us on Patreon.
Your support helps translate tutorials into other languages to reach more investigators worldwide.

Mini-Course on Velociraptor IR and announcements | DFIRScience on Patreon Join DFIRScience on Patreon to get access to this post and more benefits.

Winners were selected for the giveaway! Thanks for checking out our talk on forensics in the military (https://youtu.be/ZGvyThzafJE). More chances to win coming soon!

Want to learn about digital forensics in the military? Andrew Lister talks career pathway from military to private sector

✨Sign up for a chance to win prizes✨ https://forms.gle/vAhy7NFfei5ZVuLy8


https://youtu.be/ZGvyThzafJE

Digital Forensics and the Military - Interview with Andrew Lister Win Prizes! Take the quiz here: https://forms.gle/vAhy7NFfei5ZVuLy8 (open until 2022-08-19)We often talk about digital forensics in criminal and civil invest...

As soon as Summit Day 2 ends, join and I Beg to DFIR () as we talk about the awards and what's next in forensics!

Forensic 4:Cast Awards ✨ The real award is DFriends we made along the way ✨ Come hang out with the nominees for the Forensic 4:Cast "Best DFIR Show of the Year": 13Cubed, I Beg to DFIR, and DFIR Science!We will have a chat immediatel...

What is in RAM?

Forensics: What data can you find in RAM? Random Access Memory forensics starts with acquiring RAM from a live (turned on) system. There are several ways to collect the contents of RAM from a compute...

Windows and Linux authentication bypass with the new Arsenal Image Mounter 3.9. Virtual DD, LVM support, and a whole lot more added. Great job Arsenal Recon

Windows and Linux Authentication Bypass with AIM This video is not sponsored, just cool features. Arsenal Image Mounter 3.9 is out and has a lot of new features. You need to check out three features: Window...

Random Access Memory can contain a lot of user-activity-related evidence. Let's take a look at the uses of RAM in https://youtu.be/7CqWBw6aOrs

Don't forget 50% of RAM analysis course until Aug. 1st.
https://learn.dfir.science/courses/RAM-Forensics-Tutorial?coupon=RAMMASTER50

What is Random Access Memory? Random Access Memory forensics starts with acquiring RAM from a live (turned on) system. There are several ways to collect the contents of RAM from a compute...

We just released our first online course! How to Collect and Analyze Random Access Memory. See how useful RAM can be in your investigations. Check it out now and get 50% off until August 1st.

https://learn.dfir.science/courses/RAM-Forensics-Tutorial?coupon=RAMMASTER50

How to collect and analyze Random Access Memory Random Access Memory (RAM) is a core component of almost all digital devices, but digital investigators rarely collect and investigate this data source. Learn how to get more and better evidence with RAM forensic analysis.

Only two days left! Please vote for DFIR Science Forensic 4cast "DFIR Show of the Year"!
https://forms.gle/nRDGNP2qeEVPPyPj6

DFIR Science was nominated for the 2022 Forensic 4:cast awards! ✨THANK YOU! ✨ 🤯🥳🥳


Now in the top 3 - please vote for the finalist!

DFIR Science nominated for Forensic 4:cast Award The DFIR Science YouTube channel was nominated for the 2022 Forensic 4:cast Awards under “DFIR Show of the Year”!

Speed up password cracking by generating targeted wordlists from RAM. A quick tutorial.

Fast password cracking - Hashcat wordlists from RAM Password cracking often takes a long time. Brute force is normally your last option. But before that wordlist usually helps guess the password faster.Popular...