DFIR Diva

Volatility New Release: #volatility3 v2.28.2 - visit github.com/volatilityfo... for details and downloads. #memoryforensics #dfir

Our new 𝗠𝗮𝘀𝘁𝗲𝗿𝗶𝗻𝗴 𝗦𝗲𝗮𝗿𝗰𝗵 𝗘𝗻𝗴𝗶𝗻𝗲𝘀 course is live! Most of us only use a fraction of what search engines actually offer. 𝗧𝗵𝗶s #OSINT course is about analysis and methodology (and operators). Start making search engines work for you. @webbreacher.com @hatless1der.com

The DFIR, OSINT, and Cybersecurity Community Listings site is now live! Find and Submit: - Events - Discounts - Giveaways - New Releases - CFPs - Scholarships - Jobs Submissions are FREE Link: community-listings.dfirdiva.com #DFIR #OSINT #Cybersecurity

Congrats to the winners of the @13cubed.bsky.social Summer Giveaway! 🎉 Ricky Valentin: Investigating Windows Endpoints Tate Pannam: Investigating macOS Endpoints Moaz Hossam: Investigating Linux Devices theAtropos4n6: Investigating Linux Devices Monk_VJ: Investigating Linux Devices

🎉 Congrats to the winners! 🏆 Calvin Kyle C. - Investigating macOS Endpoints Jaspher S. - Investigating macOS Endpoints Pir00t - Investigating macOS Endpoints ComandanteBowie - Investigating Linux Devices @spiffysec.bsky.social - Investigating Windows Memory I'll be reaching out to you shortly.

Congrats to the winners of the @13cubed.bsky.social Valentine's Day Giveaway! 🎉 🏆 geekypanda411 - T-Shirt and Investigating macOS Endpoints course 👕 bmmaloney97 - T-Shirt 👕 Brian Randel M. - T-Shirt 👕 Viktor S. - T-Shirt 👕 Amr Khaled - T-Shirt 👕 Roberto Orozco - T-Shirt

Congrats to the @13cubed.bsky.social giveaway winners!

Hack The Box is hosting their first all Blue CTF next month! Dates: September 22nd - 26th Form a team and compete for prizes 🏆 Challenges Include: - DFIR - SOC - Malware Reversing - Threat Intelligence Link: ctf.hackthebox.com/event/detail...

Week 17 - 2025 #DFIR thisweekin4n6.com/2025/04/27/w...

I recorded a brief video, walking through some of the different functions in MalChela in the new GUI, stepping through basic static analysis to yara rule writing - all in minutes.

youtu.be/hI1EqojI1DA #DFIR #MalwareAnalysis #YARA #MITRE #Rust MalChela: github.com/dwmetz/MalCh...

This is an interesting write up on a slightly different #Docker #container #malware attack from the Cado Security and Darktrace teams. 🔗 www.darktrace.com/blog/obfusca...

Interested in learning about #DFIR and don't know where to start? Then we highly recommend you check out our full "C5W-100 - Introduction to Digital Forensics" course. It is completely FREE and it should help you get started. #infosec #cybersecurity academy.cyber5w.com/courses/C5W-...

🐍 SLEUTHCON is coming! 🐍 Registration and CFP are now open for this year’s SLEUTHCON—happening June 6th, both in-person in Arlington, VA, and virtually. www.sleuthcon.com 1/x

There's a new Hindsight release! Hindsight v2025.03 focuses on Extensions - parsing more activity and state records, highlighting Extension permissions, and making it easier to examine Manifests. 🌐 Blog: dfir.blog/hindsight-pa... 🛠️ Tool download: hindsig.ht/release #DFIR #Chrome #Extensions

New Autopsy release is out! 🎉 It's been a minute, but it's out. Notable features are BitLocker support and it can run side-by-side with Cyber Triage. Plus, a bunch of library updates. Now Cyber Triage and Autopsy can be used on the same case at the same time! www.autopsy.com/autopsy-4-22...

New Blog Post! Free & Affordable Training News Monthly: Feb - Mar 2025 - Newly released DFIR, OSINT, and Malware Analysis training, tools, and books from February 2025 - Upcoming events for March 2025 Link: dfirdiva.com/free-afforda... #DFIR #IncidentResponse #MalwareAnalysis #OSINT

I noticed the DFIR & Blue Team Certifications + Training for under $1,000 section had a lot of broken links. They've been fixed 🙂 training.dfirdiva.com/listing-cate... #DFIR

Missed the @magnetforensics.bsky.social Virtual Summit #CTF but want the images for testing and learning? We have already shared them with @nist.bsky.social CFReDS cfreds.nist.gov/all/Hexordia...

New #iLEAPP 2.1.0 release is out! #DFIR github.com/abrignoni/iL...

Ultimate Cybersecurity Career Humble Bundle! Includes: - Incident Response for Windows - The OSINT Handbook - Effective Threat Investigation for SOC Analysts and more! Link: humblebundleinc.sjv.io/kOaeod (Partner Link) #DFIR #IncidentResponse #MalwareAnalysis #Cybersecurity #OSINT

DFIR Giveaway! You could win: ✅A FREE @detegoglobal.bsky.social Digital Forensics & Cyber Crime Investigations course worth $399 each ✅Detego merch pack ✅‘Force of Justus’ crime novel Enter here: detegoglobal.com/dfirdiva THREE winners will be announced March 10th, 2025! #DFIR

Free & Affordable Training News Monthly: Dec 2024 - Feb 2025 - Newly released DFIR, OSINT, and Malware Analysis training, tools, and books from Dec 2024 & Jan 2025 - Upcoming CTFs and training for February, 2025 Link: dfirdiva.com/free-amp-aff... #DFIR #IncidentResponse #MalwareAnalysis #OSINT

The winner of the @13cubed.bsky.social XPlat Bundle is @dfirjw.bsky.social! Congrats!

"Mastering Sysmon: Deploying, Configuring, and Fine-Tuning" A free mini eBook for #DFIR professionals with practical steps to deploy, fine-tune, and start logging with Sysmon. dfirinsights.com/2024/11/27/m... #infosec #blueteam

PSST: our 1-day OSINT 101 (for beginners) class is free! academy.plessas.net/offers/iFJiA...

I have 76 feeds in this list. Next week I will add more podcasts, but if I am missing important blogs (and I KNOW I am), give me a hand. Don't be shy - post your own blogs too. #OSINT knowledgebase.plessas.net/OSINT-Feeds-...

Just a heads up. M$ is OCRing all your images in OneDrive for business in an unsecured database on your desktop/laptop. Happy Friday. #DFIR

We uploaded a new #OSINT challenge for you to try your hand at. Can you identify the Latitude and Longitude of where this photo was taken? www.youtube.com/shorts/6iYuE...

Great spreadshit for #DFIR to know if something was executed - blog.1234n6.com/available-ar...

Accelerated Rust Windows Memory Dump Analysis (ISBN-13: 978-1912636891) is now available in PDF format with and without recording and additional materials: www.patterndiagnostics.com/accelerated-...

Want to take part in the Magnet Virtual Summit #CaptureTheFlag competition? Let @b1n2h3x.bsky.social share some helpful info, including what's new (like the ability to play in teams), how to take part, and where to get some tips & tricks: ow.ly/mHW350UkTXe #MVS2025 #CTF #DFIR

2024-12-04 (Wednesday): #AgentTesla variant using #FTP for data exfiltration. A sanitized copy of the email distributing the malware, a #pcap from an infection run, the associated malware samples, and a list of indicators are available at www.malware-traffic-analysis.net/2024/12/04/i...

Come join us tomorrow #DFIR

Go back to the basics when leveraging OSINT for your investigations. Google Dorking is a great example. Using search operators can greatly reduce the number of search results while increasing accuracy. Site:bsky.app Privacy Privacy policy from Bluesky. Wanna try more Osmosis.ctfd.io check it out!

Really pleased to complete the five Bellingcat open source puzzles on day one. If you want to play along, you can join in at challenge.bellingcat.com Enjoy! #Bellingcat #OSINT #Investigations #Geolocation

#DFIR 💭 of the day: Collaboration between practitioners and academia is crucial. To get ahead of rapid changes in #DFIR, we need scientific study and research! This is the largest scientific survey of DFIR practitioners. Must read to understand current issues www.sciencedirect.com/science/arti...

It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect!