Posts
-
-
-
Extracting Data from the Event Payload from .evtx Event Logs with X-Ways Forensics
Today I learned that quotation marks in the Event Log Events.txt file is not a good thing, and what text qualifiers are.
-
BitLocker and Connected Storage Devices
BitLocker use and related prefetch files for connected storage devices.
Links & posts
‘X-Ways Forensics’ Video Clips
AboutDFIR
DFIR Artifact Museum
DFIR Community Hardware Fund by DFIRScience
DFIR Dominican
DFIR Testimony
DFIR Training
Digital Forensics Discord Server
DigitalCorpora
Forense nella Nebbia
Stark4n6’s startme
Suspect Behind the Keyboard
The Hitchhiker’s Guide to DFIR
The X-Ways Forensics Practitioner’s Guide
This Week In 4n6
WinFE
- February 2026
- January 2026
- December 2025
- June 2025
- May 2025
- December 2024
- November 2024
- September 2024
- May 2024
- April 2024
- December 2023
- November 2023
- July 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- October 2022
- September 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- September 2021
mr. eerie 