There I was, just getting ready for work….

I sometimes carried up to 10 cell phones at one time for work. Each phone had…

The spark of a book

I believe that most every book begins by seizing upon the spark of an idea before…

That sliver of space between first and second place in the DFIR space

TL:DRThe difference in skill and knowledge between the very best and everyone else is small but…

A forensic book is not just a forensic book if you do forensics.

I just published the second edition of the X-Ways Forensics Practitioner’s Guide. If you use X-Ways…

Been a long time coming, but now comes the second edition of the X-Ways Forensics Practitioner’s Guide.

The short story:The book is done!Get it at $20 off during the 100-hour book launch coming…

I lived a double life.

I lived a double life for a decade. I have now been away from that life…

There is no censorship because I haven’t seen it.

Today, I posted on social media that my posts about not being censored were not censored.…

There are Only Two things That set you Apart from Another DFIR Practitioner

Two things that set you apart from other practitioners are (1) what you know and (2)…

When Being Self-Taught Goes Wrong

I had an interesting discussion with a highly educated and self-proclaimed computer-literate professional on the process…

Well, I didn’t see that coming…

 If you want to be entertained, block out 5 minutes of your time at 9am (PDT)…

Aren’t we neglecting something in DFIR?

The technical piece of DFIR is not difficult. If you know what you are looking for,…

The forensic process begins before processing forensics begins

I was asked an age-old question via a Twitter DM today:”Should I pull the plug or…

When OSINT is turned into the Baseball Bat of Internet Mob Justice

We are of a curious mind, we the forensic examiners, private investigators, OSINT professionals, and journalists.…

I took a look at Instagram’s Terms of Service so that you won’t have to.

Who really reads the Terms of Service anyway?Are EULAs and TOSs intentionally designed as multi-page, single-spaced,…

White Paper: The Susceptibility of Interconnected Devices in a Global Concept as Surveillance Affects the Consumer-user

I read an article that China used technology to spy on users via their phones (https://www.theguardian.com/us-news/2020/dec/15/revealed-china-suspected-of-spying-on-americans-via-caribbean-phone-networks). Here…

How long does it take to get into the DFIR field?

Question I received: How long does it take before I can expect to get into a…

An expert is just one page in a book ahead of you

Let me dispel your notion of what an “expert” is. An expert is someone who has…

Should you improve your DFIR skills on your personal time?

Almost two years ago, I wrote about burning out in DFIR (“Only race cars should burn…

TikTok is like a big, greasy cheeseburger. We know it is bad for us, but don’t care.

Short version: Any social media platform can be compared to the biggest, greasiest cheeseburger that you…

Jessica Hyde and I talk about forensic stuff

Jessica Hyde of Magnet Forensics sat down together (virtually…) to talk about forensics.  In case you…

Facebook Spoofing: Your Reputation, Investigations, and Massive Data Collection

A “new” article on imposter Facebook accounts was published today in the Philippines.  I put “new”…

Language translation service: for fast and accurate data translation

Language failures caused by incorrectly translated documents can be costly to the company. This type of…

Add a Dab of Balance in your DFIR World

Jessica Hyde’s post of Giving Back in DFIR from 2018 is a great write up on…

The Easy Way to Learn DFIR

Summary There is no easy way to learn DFIR. You can stop reading from here if…

Game of Thrones, DFIR Style

Short post and quick opinion. I came across some tweets today about how bad people are…