Brett's Ramblings

Bitcoin Forensics
Brett Shavers
Digital Forensics
Two books in the works. In between the adventures in life and work, I have been busy with writing.  One, a fiction book, is expected to be in print next year (all on the publisher's schedule).  It’s an exciting book and sure to grab your attention. More on that sometime later.  The second book is another nonfiction forensics book, Bi...
Anonymity: Criminals are only as good as their last mistake
Brett Shavers
Digital Forensics
I’m big on privacy, even though I know that practically, the only information that is private today is that which (1) only you know and (2) does not exist anywhere outside your head.  Everything else can be had one way or another, by hook or crook.  Most personal information we willingly give away, such as our date of birth when signing up for “fre...
Placing the Suspect Behind the Keyboard online course
Brett Shavers
Books
My newest course is out and it is the best course you will find on the topic.  More than 12 hours of investigative methods and effective techniques to build a case against criminals who use technology to commit crimes.   Learn the methods to track criminals online and in the real worldLearn the tricks of the trade (tradecraft) of covert communicati...
The 2 Worst Games to Play in #infosec
Brett Shavers
Digital Forensics
The “Hot Potato” Game The goal of the Hot Potato Game is to simply pass off responsibility to the next person as soon as you can before something bad happens.  When the responsibility lands in your lap again, you pass it to someone else as soon as you can.  Eventually, someone gets caught holding the hot potato and they lose (and you win!...
Forensic 4:cast awards.... VOTE FOR MY BOOK!! (pretty please)
Brett Shavers
Books
I am humbled again as my book,.Hiding Behind the Keyboard, has been nominated for the Forensic 4:cast Digital Forensic Book of the Year.  It would be my honor if you would vote for the book.  The two competing books are also great books, but this one is mine ? I wrote this book primarily as a follow up to my first book, Placing the Suspec...
The 2 Fastest and Least Expensive Ways to Learn X-Ways Forensics
Brett Shavers
Digital Forensics
***4/18/2017*** ***UPDATE ON THE PROMO*** This is all you need to know: The X-Ways Forensics Practitioner's Guide online course is still available at only $119 instead of the regular tuition of $599 until April 19. If you missed the promo for 80% with a FREE copy of the X-Ways Forensics Practitioner's Guide book, you still have time to get&nbs...
FREEZE! Busted by the Fridge. The ways that tech influences writing fiction, making movies, and busting criminals.
Brett Shavers
Digital Forensics
One interesting investigation I had was that of a murder-for-hire in one city that the suspect used a Google search to find the victim’s home address in another city.  Simple enough crime to plan.  Google the name, find the address, do the hit.  Except in this particular case, although the suspect Googled the correct name, there...
Want to know how to break into DF/IR?
Brett Shavers
Digital Forensics
I see the digital forensics training market reaching a saturation point in some aspects.  Most, if not all, forensic software companies provide training, govt agencies provide internal training, individuals provide training, every college looking for a new revenue stream is adding forensic programs for training, and a new forensics book comes ...
Reminder for the last discount for the X-Ways Forensics Practitioner’s Guide Online and On demand course.
Brett Shavers
Digital Forensics
If you were thinking of doing it, this is the best time since the $599 online course will only be at a discount of 60% for less than two weeks (until Dec 31, 2016) for only $235.  PLUS, registering before December 31, 2016 gets you a print copy of the book, the X-Ways Forensics Practitioner’s Guide shipped to you. Unfortunately, the book is on...
Brett's opinion on writing a DFIR book
Brett Shavers
Books
Let me disclaim a bit.  I don’t know everything about writing or publishing.  All I know is what I have done.  With that, I have been asked about writing books (computer/digital forensics topics) over the past few years.  Let me give my experience to anyone considering writing a forensic book. To start, I have written three book...
The most important tool in DFIR that you must have...
Brett Shavers
Digital Forensics
One of the workstations I have ranks up there in the clouds insofar as hardware.  You name it, this machine has it.  Lots of it.  Crammed into a huge case with lots of lights and liquid cooling hosing.  I call it the “Monster”.  No matter what I throw at it, it chews it up, spits it out, and smiles asking for mo...
Learn by drawing out the experiences of others
Brett Shavers
Digital Forensics
I have taught digital forensics at the University of Washington (on and off) for the better part of a decade.  I have also been a guest speaker at several universities for longer than that.  One thing that I learned from the continuing education courses is that most of the students are already working adults with many already working...
Jimmy Weg's blog archive
Brett Shavers
Digital Forensics
Most people in the DF field know or know of Jimmy Weg.  His blog was one of the most popular in the community, but like anyone, Jimmy has retired and will be retiring his blog.   However, he has offered the blog to be used by anyone until the domain expires.  I know that one DF association (IACIS) will be archiving the blog for its members and Jimm...
Ye ol’ Windows FE
Brett Shavers
Digital Forensics
Not to get into the long history of WinFE, but rather focus on the course I created about 2 years ago…it’s time for an update to the course.  There have been almost 5,000 people that signed up for the online WinFE course since 2014.  WinFE has been taught everywhere since its inception, from colleges to federal forensic courses to ev...
X-Ways Forensics Sucks….
Brett Shavers
Digital Forensics
…only with decryption, and even at that, it does everything else superbly. I probably caught your attention if you are an X-Ways Forensics user.  The only thing that sucks about X-Ways Forensics is that it doesn’t do encryption.  By “doing encryption”, I mean that it doesn’t decrypt encrypted files or systems.  Besides that one aspec...