What's new at DFIR Training?

DFIR Review "Year in Review"

DFIR Review was one of the biggest innovations for DFIR practitioners and continues to grow! Check out the Year in Review to see the success of a great program.

 
Hot
**NOTE**The download link has disappeared. If you find it, submit it in a comment ...
Hot
SDB Explorer is a GUI program that allows for interacting with Microsoft Shim data...

DFIR Bloggers

Social Networks
Hot
Last PostBlogURLFeatured | Arsenal Recon Insights | arsenalrecon.com/insights/

Bulk extractor

DFIR Tools
Hot
bulk_extractor is a computer forensics tool that scans a disk image, a file, or a ...
Hot
"With the Advent of XP SP2 when a file1 is downloaded from the internet (i.e. by c...
Hot
"Mobile digital data has become critical evidence in criminal cases, adding a sign...
Hot
"Cellebrite's UFED Reader is a free, executable application, purpose-designed for ...

Forensic Notes

DFIR Tools
FeaturedHot
 The Forensic Notebook will contain all your notes related to the case, timestampe...

PDF Examiner

DFIR Tools
Hot

Maresware Total

DFIR Tools
Hot
Total performs several useful functions. Use it to: total fields in succeeding rec...
Paraben is a digital forensics technology provider specializing in smartphone fore...
Hot
Registry Explorer is a new approach to interacting with Registry hives. It has sev...

de4dot

DFIR Tools
Hot
".NET deobfuscator and unpacker." github.com/0xd4d/de4dot
FeaturedHot
"Belkasoft Evidence Center makes it easy for an investigator to search, analyze, s...
Hot
Master the tools and techniques of mobile forensic investigationsConduct mobile fo...
Hot
This lab is for learning and practicing forensics! We will be providing training f...
Hot
Collection of SQL queries templates for digital forensics use by platform and appl...

Paraben E3:DS

DFIR Tools
Hot
 Mobile forensics is the most dynamic of the digital forensic disciplines. Underst...

AppCompatCache

Artifacts
Hot
"As background, the Application Compatibility Cache is used by the Windows operati...
Hot
"When time is short and you need to acquire entire volumes or selected individual ...
Hot
The E3:Universal provides top tier acquisition, analytics, and reporting to optimi...
FeaturedHot
The Definitive Guide to File System Analysis: Key Concepts and Hands-on Techniques...

Last visited MRU

Artifacts
Hot
Tracks the executable and directory location that an application uses to open file...
Hot
An interactive book-and-DVD package designed to help readers master the tools and ...
Hot
Handbook of Digital Forensics and Investigation builds on the success of the Handb...
FeaturedHot
Registry Recon is not just another Registry parser. We developed powerful new meth...
FeaturedHot
HUGE collection of registry artifacts related to forensics!

FeatureUsage

Artifacts
Hot
 So what does it track and where are forensic artifacts located? It tracks events ...

Unified Logs

Artifacts
Hot
The new Unified Logging and Tracing System for iOS and macOS uses Activity Tracing...
Hot
Profiles default directory name is randomly generated for each user
Hot
Firefox cache (Mac)
Hot
Profiles default directory name is randomly generated for each user
Hot
Firefox bookmarks and form history 
Hot
facetime recent calls 
Hot
Facetime log - initial contact 
Hot
facetime account info 
NewHot
Cyber attacks are currently blooming, as the attackers reap significant profits from...
NewHot
We all know how digital technology has irreversibly changed our daily lives: we no...
Hot
New smartphones made by small companies enter the technology market everyday. Thes...
Hot
With the development of deep learning, convolutional multimedia forensics for task...
Hot
In today's Industrial IoT (IIoT) environment, where different systems interact wit...
Hot
The challenges faced by organizations in effectively carrying out digital forensic...
The growing preference of automation and digital transformation over semi manual o...
Hot
In the past, digital forensic, with its exploration techniques, are a lane to the ...
Hot
Internet security can be compromised not only through the threat of malware, fraud...
Hot
Forensic analysis and evidence collection for web browser activity is a recurring ...
Hot
The paper considers the impact of cybercrime on the rise in consumption and creati...
Hot
This paper presents a comprehensive investigationof authentication schemes for sma...
Hot
As JPEG is widespread de facto image format, Most of the images available in compu...
Hot
In most of the digital steganography methods provided for natural digital images, ...
Hot
Nowadays, cloud computing clouded with criminal activities that have caused variou...
Hot
COMPUTER FORENSICS INTEGRATES THE FIELDS OF COMPUTER SCIENCE AND LAW TO INVESTIGAT...
Hot
The emerging world of technology is also becoming a platform for the increase of c...
Hot
With the increase in the field of digital crime anddata theft; the law enforcement...
Hot
In this modern era of computers and mobile phones, where every hand has reach to d...
Hot
Surveillance methods are becoming widely popular in many organizations, including ...
Hot
Cloud is no longer a new word to the computingworld and has transformed the IT ind...
Hot
The decentralized nature of blockchain technologies can well match the needs of in...
Hot
With the advancement in virtualizationtechnology, the use of virtual machines has ...
Hot
The Information Technology (IT) academic courses have always been challenged with ...
Hot
Using a face validity approach, this paper provides a validation of the Database F...
Hot
The continuing rise of network security threats and network attacks have motivated...
NewHot
Email ConversionChoose From a Range of Email Converters Supporting Conversion Betw...
NewHot

Name That Hash

DFIR Tools
Have you ever come across a hash such as 5f4dcc3b5aa765d61d8327deb882cf99 and wond...
Hot
NSF Converter is a significant software to convert NSF file into Outlook PST forma...
Hot
Two query become mandatory here - how to export Lotus Notes to Outlook or what is ...
Hot
How to export OST to PST format? – It can solve with this admirable software that ...
Hot
MS-Office-ooxml-file-parser
Hot

SQLite queries

DFIR Tools
BrowsersMozilla Firefox 61+:firefox_places.sqlfirefox_favicons.sqlfirefox_formhist...
Hot

WindowsTimeline

DFIR Tools
Works with any ActivitiesCache.db (Windows 1703/1709/1803/1809/1903/1909/2004 ..) ...
Hot
Welcome, hackers. This is a live, playable archive of DEF CON CTF challenges. Brou...
Hot

Hash List Importer

DFIR Tools
This EnScript is designed to read a text file containing one or more hash items an...
Hot
Local Website Archive offers a fast and easy way to store information from the web...
Hot
Website Ripper Copier
Hot

Cyotek WebCopy

DFIR Tools
 Cyotek WebCopy is a tool for copying full or partial websites locally onto your h...
Hot

WEBSITE DOWNLOADER

DFIR Tools
 This tool is to download or copy websites that are currently online. The free ver...
Hot
Wayback Machine Downloader
Hot
It allows you to download a World Wide Web site from the Internet to a local direc...
Hot

Timeline

DFIR Tools
Timeline is a cross-platform application for displaying and navigating events on a...
Hot
 to recover passwords of Adobe PDF files of all versions 
Hot
 to recover passwords of Microsoft Office and OpenOffice/LibreOffice documents 
Hot
 to recover passwords of Zip and WinZip archives 
Hot
 to recover lost passwords of RAR/WinRAR files 
Hot

Passcovery Suite

DFIR Tools
 to recover passwords of Microsoft Office, OpenOffice/LibreOffice, Adobe PDF docum...
Hot

DuckHunt

DFIR Tools
Python wrapper for FileLocator Pro SearchesBlog post detailing it's purpose is at:...
Hot

eml-parser

DFIR Tools
eml_parser serves as a python module for parsing eml files and returning various i...