Derek completed the SANS FOR585 course. He's a little smarter now.
Lionel Notari’s iOS Unified Logs Acquisition Tool
Derek explores a new tool by Lionel Notari.
Reflecting on 2023
Derek wrote a blog post briefly reflecting on 2023.
In Search of Extraction Techniques for Pair-Locked iOS Devices
Derek explores extraction techniques for supervised pair-locked iOS devices.
Disk Toggling, Validating WinFE
Derek toggles disks using DiskPart and verifies a couple of WinFE builds write protects a drive. He also completed a class on WinFE.
DFIR (Mostly) Updates
Derek jots a few casual notes.
SMART(er) Health Check-Up
Derek explores how to collect and compare SMART information before and after a forensic acquisition. He also wrote a couple of batch files.
Getting SMART(er) with Information
Derek explores methods to retrieve SMART information from write protected NVMe drives.
Forensic 4:cast Awards, 2023
Update: I asked and you all delivered. I am a finalist for Forensic 4:cast Awards' #DFIR Newcomer of the Year! Derek requests your vote for Forensic 4:cast Awards' DFIR Newcomer of the Year.
Forensic Hard Drive Data Recovery with Scott Moulton
Derek learns how to rebuild a hard drive with Scott Moulton from My Hard Drive Died. It's alive!