Your Signature Is a JAR 13Cubed

4.3K views - 7 years ago

Mini Memory CTF - A Memory Forensics Challenge 13Cubed

11.3K views - 6 years ago

A File's Life - File Deletion and Recovery 13Cubed

9.2K views - 2 years ago

Prefetch Deep Dive 13Cubed

21.2K views - 5 years ago

Anatomy of an NTFS FILE Record - Windows File System Forensics 13Cubed

23.4K views - 3 years ago

The Volume Shadow Knows 13Cubed

10.7K views - 6 years ago

Some Assembly Required 13Cubed

17.8K views - 7 years ago

Email Header Analysis and Forensic Investigation 13Cubed

175.3K views - 6 years ago

Detecting Persistence in Memory 13Cubed

12.4K views - 6 years ago

Getting Started with Plaso and Log2Timeline - Forensic Timeline Creation 13Cubed

37.4K views - 5 years ago

Windows MACB Timestamps (NTFS Forensics) 13Cubed

33.4K views - 8 years ago

EventFinder2 Demo 13Cubed

3.2K views - 7 years ago

Pulling Threads 13Cubed

7.9K views - 7 years ago

Introduction to EvtxECmd 13Cubed

19.8K views - 6 years ago

Juicy PDFs 13Cubed

8.6K views - 7 years ago

Linux Forensics! First Look at usbrip 13Cubed

5.4K views - 6 years ago

Introduction to Memory Forensics 13Cubed

87.6K views - 8 years ago

Free Tools From Magnet Forensics 13Cubed

12.3K views - 6 years ago

NTFS Journal Forensics 13Cubed

23.9K views - 6 years ago

Persistence Mechanisms 13Cubed

20.1K views - 7 years ago