Posts
-

Disk Toggling, Validating WinFE
Derek toggles disks using DiskPart and verifies a couple of WinFE builds write protects a drive. He also completed a class on WinFE.
-

-

SMART(er) Health Check-Up
Derek explores how to collect and compare SMART information before and after a forensic acquisition. He also wrote a couple of batch files.
-

Getting SMART(er) with Information
Derek explores methods to retrieve SMART information from write protected NVMe drives.
Links & posts
‘X-Ways Forensics’ Video Clips
AboutDFIR
DFIR Artifact Museum
DFIR Community Hardware Fund by DFIRScience
DFIR Dominican
DFIR Testimony
DFIR Training
Digital Forensics Discord Server
DigitalCorpora
Forense nella Nebbia
Stark4n6’s startme
Suspect Behind the Keyboard
The Hitchhiker’s Guide to DFIR
The X-Ways Forensics Practitioner’s Guide
This Week In 4n6
WinFE
- June 2025
- May 2025
- December 2024
- November 2024
- September 2024
- May 2024
- April 2024
- December 2023
- November 2023
- July 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- October 2022
- September 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- September 2021