#windowsforensics

Hasamba

@hasamba72.bsky.social

5 months ago

Preconfigured Windows VM for DFIR investigations with a pinned DFIR_Toolbar and Explorer right-click integrations for artifact and disk-image parsing. Inspired by SIFT Workstation. #DFIR #WindowsForensics #tool https://bit.ly/3J6cZQb

🐉 Fancy4n6 🦄

@shannadaly.bsky.social

9 months ago

NTUSER.DAT is a system file found in every user profile on a Windows system. It stores the user's Registry hive under HKEY_CURRENT_USER (HKCU).

🧠 Inside?

* Program settings
* Recent files
* User preferences
* Evidence of activity

#DFIR #LearningDFIR #WindowsForensics

Paraben Forensics

@parabencorp.bsky.social

11 months ago

Enjoy the new Forensic Impact blog by guest blogger Vamsi Krishna Chinta (lnkd.in/etzt7Ckm) where he goes into Windows Log analysis using open-source tools. bit.ly/4c6eh80 #DFIR #DigitalForensics #WindowsForensics

CYBER 5W

@cyber5w.bsky.social

1 year ago

📢 Reminder: Our Windows Forensic Investigation webinar is almost here!

📅 When: Dec 4th, 12 PM ET
🔍 Explore Windows artifacts & forensic techniques.
👉🏻 Register now: bit.ly/c5w-webinar4
#C5W #CCDFA #DFIR #WindowsForensics

Detectalix

@detectalix.bsky.social

1 year ago

#windows #windowsregistry #windowsforensics #digitalforensics #computerforensics #regripper #kalilinux