13Cubed

I Got Promoted at Microsoft... Then I Quit

I spent nearly six years at Microsoft. Then, right after getting promoted, I quit. It sounds crazy, but there’s a lot more to the story. Here’s why I decided to ...

[+] Show More

Now Playing

I Got Promoted at Microsoft... Then I Quit

I spent nearly six years at Microsoft. Then, right after getting...

Now Playing

Windows Forensics on a Mac?! You Have to See This!

In this special guest episode, we'll look at IRFlow Timeline, a free,...

Now Playing

Want to Get Into Threat Hunting? Start Here!

Architecting the Hunt is 13Cubed's first mini course, an entry-level,...

Now Playing

The Threat Hunting Course I Wish I Had

Introducing Architecting the Hunt. Great threat hunting starts with the...

Now Playing

Automate Volatility 3 Memory Analysis with This Tool

In this episode, we'll look at a tool that can run multiple Volatility...

Now Playing

How the USN Journal Really Works

Have you ever wondered how you can look at the USN Journal on a live...

Now Playing

The Korvath Incident: A macOS Forensics Challenge

🔥 Announcing a new challenge for Investigating macOS Endpoints! This...

Now Playing

Hunting Copy Fail: 732 Bytes to Root

In this episode, we'll look at how Copy Fail (CVE-2026-31431) works and...

Now Playing

The AI Conversation I've Been Avoiding

I’ve got some thoughts about AI. Let’s talk about how it’s...

Now Playing

Mac Imaging Made Easy with Fuji

🎉 New for 2026! In this episode, we’ll look at Fuji — a free,...

Now Playing

Tracking Program Execution with a Little Known Registry Key

In this episode, we’ll take a look at another obscure, registry-based...

Now Playing

The Truth About Windows Explorer Timestamps

In this episode, we’ll uncover how Windows Explorer really retrieves...