Brett's Ramblings

APR
17
0

Aren’t we neglecting something in DFIR?

The technical piece of DFIR is not difficult. If you know what you are looking for, and you know how to find it, the work is actually easy. I do not say this to mean that anyone off the street can do this work without training or education. I mean th...

Continue reading
  25025 Hits
DEC
12
0

Public Records

I have an outstanding public records request. It is not "outstanding" in the manner that I wrote a great request, but "outstanding" in that I haven't received any public records yet from the request. I have been hired by government agencies as a cons...

Continue reading
  7065 Hits
FEB
10
3

The forensic process begins before processing forensics begins

I was asked an age-old question via a Twitter DM today: "Should I pull the plug or image live?" I thought this was a rhetorical or 'homework' question, because how would I know?  I gave a short answer of it depends on this and that, assuming tha...

Continue reading
  33412 Hits