Ali Hadi | B!n@ry

Ali Hadi | B!n@ry

@binaryz0ne.bsky.social

DFIR and Adversary Simulation

1.4K followers102 following178 posts

Pinned

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

If you’re looking to get into Digital Forensics, this is probably the most affordable & complete training you’ll find. The value packed into this bootcamp goes far beyond the price, & right now, there’s a discount running! #DFIR #DigitalForensics #CyberSecurity PLEASE SHARE with others! Thank You!

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

After more than a decade in academia, teaching thousands of students and professionals, I’ve decided to return to the world of consulting. I’m deeply grateful to my family for their unwavering support and to everyone who has helped me grow into the person I am today. #DFIR

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

🚀 Starting August, you'll be able to test your malware analysis skills with our upcoming certification exam! Huge thanks to "Saad AHLA" for leading the development of this challenge. Get ready, this is truly a fun one! #malware #DFIR #CyberSecurity #ThreatHunting #BlueTeam #CCMA

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

Our CCDFA Bootcamp is one of the best deals in DFIR training! The course content, labs, virtual lab access, and live sessions all included. Only have 2 seats left for the August bootcamp! academy.cyber5w.com/courses/c5w-... #DFIR #DigitalForensics #CyberSecurity #BlueTeam #IncidentResponse

academy.cyber5w.comC5W CERTIFIED DIGITAL FORENSICS ANALYST - LIVE TRAININGThe Windows Forensics course explores the forensic artifacts one may encounter when working with the Windows operating system. This course is focused on hands-on labs that covers artifacts, which are ...
View full thread
Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

I will be sharing all the content, which are basically the labs, files (simple tools/scripts/etc), and few presentations for anyone who would like to use in their classroom. So keep an eye out for this. #DFIR #Cybersecurity #Infosec #ThreatHunting #ThreatSimulation

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

I did not want to use a SIEM (Elastic/Splunk/etc) to simulate situations when you don't have such a capability, but you will still need to do hunting/investigations with limited and/or FREE tools. So we installed Sysmon on all systems and had a Velociraptor server with agents.

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

If you’re looking to get into Digital Forensics, this is probably the most affordable & complete training you’ll find. The value packed into this bootcamp goes far beyond the price, & right now, there’s a discount running! #DFIR #DigitalForensics #CyberSecurity PLEASE SHARE with others! Thank You!

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

This is a great opportunity for beginners to put their skills to the test! #DFIR #Cybersecurity #Infosec #DigitalForensics

CYBER 5W@cyber5w.bsky.social

🚨 The C5W Certified Digital Forensics Foundations (CDFF) Exam is LIVE! 🎓 Prove your skills: FTK Imager, file systems, timestamps & more. #CDFF #DFIR #DigitalForensics #Cyber5W #Cybersecurity #Infosec 🔥 50% OFF for the first 20 participants! 👉 academy.cyber5w.com/courses/c5w-...

academy.cyber5w.comC5W Certified Digital Forensics Foundations ExamThe CDFF exam validates your understanding of digital forensics fundamentals, including evidence acquisition, file systems, FTK Imager, timestamp analysis, and reporting, ideal for beginners entering ...
Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

I was asked last week to help some students in the lab, but got surprised by my Digital Forensics senior students being there for one last time and giving me this gift! I will miss you all and I am so lucky that I got to work with you for the last 4 years! THANK YOU SO MUCH ❤️

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

It has a remote control and can be used to change the light colors 😅 They also gave me a card with all of their kind words and signatures on it !!! Very lucky that I had such students and I will miss them a lot! Thank you for being my students ❤️

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

Great thread to read #DFIR

Arsenal Recon@arsenalrecon.bsky.social

Three years ago a law enforcement CTF team asked us about a disk image they were told was neutered & could not be launched into a virtual machine. Arsenal Image Mounter launched it into a VM fine & provided access to all the "suspect’s" secrets w/o Windows credentials. How? #DFIR

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

Excited to announce that I’ll be delivering a keynote at ICTCS’25 titled: "Beyond Tools: DFIR in the Era of Emerging Threats" Looking forward to connecting with researchers at #ICTCS25! #DFIR #CyberSecurity #DigitalForensics

Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

Using Windows Sandbox - Course This is another FREE course to learn howto setup and use Windows Sandbox for #malware analysis or anything you want. #DFIR #infosec #CyberSecurity Check it out: labs.cyber5w.com/courses/975e...

labs.cyber5w.comMicro - Using Windows SandboxIn this micro-course, you will learn how to install and configure Windows Sandbox to be used for different testing scenarios, such as malware analysis. By the end of this course, you will have a fully...
Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

Hey #DFIR community! I’m excited to share that I’ve turned my 010 Editor video series into a full course. It includes 40+ videos and hands-on labs, so you can practice what you learn. Please share with anyone who might find it useful!

View full thread
Ali Hadi | B!n@ry
@binaryz0ne.bsky.social

📢 Missed our IoT Forensics webinar? Watch it now! 🎥 Expert @cyberyom.bsky.social shares key techniques for extracting & analyzing data from IoT devices. Don't miss out! 🚀 Watch here: academy.cyber5w.com/courses/webi... #DFIR #Cybersecurity #Infosec #IoT #Investigations

academy.cyber5w.comWebinar #6: IoT ForensicsIn this webinar, IoT forensics expert Tom Claflin explored the role of IoT devices in modern investigations, demonstrating data extraction techniques, device disassembly, and key forensic tools. He al...

Ali Hadi | B!n@ry reposted

The DFIR Report
@thedfirreport.bsky.social

🌟New report out today!🌟 Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware Analysis & reporting completed by @r3nzsec, @MyDFIR & @MittenSec. Audio: Available on Spotify, Apple, YouTube and more! thedfirreport.com/2025/01/27/c...

thedfirreport.comCobalt Strike and a Pair of SOCKS Lead to LockBit RansomwareKey Takeaways This intrusion began with the download and execution of a Cobalt Strike beacon that impersonated a Windows Media Configuration Utility. The threat actor used Rclone to exfiltrate data…