Digital Forensic Survival Podcast

Latest Episodes:

DFSP # 028 - Microcast Aug 30, 2016

Show notes

This week I am taking a breather and doing some planning for future topics. If you have a topic you would like to see covered mention it in the show notes. Full episodes will return the first week of September.

DFSP # 027 – Mac as a forensic platform Aug 23, 2016

Show notes

This week I go over some of my top reasons why Macs should be considered as a computer forensic platform.

DFSP # 026 - File Juicer Aug 16, 2016

Show notes

File Juicer is an easy to use data carving tool that runs on OS X. Take most any file, drop it on File Juicer, and watch it spin out embedded image, movie, document files and text. Perfect for on-scene triage, lab work and exploring new file types.

DFSP # 025 - RAM Extraction Tools - Part 2 Aug 09, 2016

Show notes

This is part two of RAM extraction tools. Part 1 looked at why RAM extraction is an important part of forensic analysis. In Part 2 the results of a benchmark experiment with four different RAM Extraction tools is discussed: DumpIt, Belkasoft's RAM Capturer, Magnet RAM Capture and the RAM extraction feature in FTK Imager.

DFSP # 024 - RAM Extraction Tools - Part 1 Aug 02, 2016

Show notes

This episode is a two-parter looking at RAM extraction tools. Part 1 will take a look at why RAM extraction is an important part of forensic analysis. Part 2 will go over an experiment I did with four different tools: DumpIt, Belkasoft's RAM Capturer, Magnet RAM Capture and the RAM extraction feature in FTK Imager.

DFSP # 023 - Battle Royale: FTK vs EnCase vs WinHEX Jul 25, 2016

Show notes

This week I take a look at three popular computer forensic suites: FTK, Encase and WinHex. I offer my opinion as to the strengths and weaknesses of each.

DFSP # 022 - DFIR Certification Planning & Considerations Jul 19, 2016

Show notes

If you take a look at all the different DFIR certifications that exist today you can easily get overwhelmed. There are so many to choose from it puts meaning to the saying that too many choices is no choice at all. In this episode I take a look at digital forensic certifications from two different vantage points to provide a little guidance to those that may be trying to advance themselves through a certification or two.

DFSP # 021 - The Honeynet Project Jul 12, 2016

Show notes

For those looking to get some real world hands-on experience in DFIR to build up or expand your skill set, check out honeynet.org. The non-profit offers information and challenges to help sharpen your skills.

DFSP # 020 - Amcache Forensics - Find Evidence of App Execution Jul 05, 2016

Show notes

This week I talk about Amcache Forensics, a Windows artifact that collects details about programs that have been run on a given system. This evidence can support malware/ intrusion investigations, file use and knowledge exams and data spoliations inquiries.

DFSP # 019 - Password Cracking with Hashcat Jun 28, 2016

Show notes

The last talk in the Open-Source password cracking series focuses on a tool that rivals the pay tools in function and capability - Hashcat.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Digital Forensic Survival Podcast

Related Podcasts

Links

Stay Connected