Menu
  • Home
  • My Books
  • Courses
  • About Me
  • Contact
  • Home
  • My Books
  • Courses
  • About Me
  • Contact

Brett Shavers | forensics & things

Brett's Ramblings

Subscribe to blog
Unsubscribe from blog
Settings
Sign In
If you are new here, Register
  • Forget Username
  • Reset Password

X-Ways Forensics

Subscribe to this list via RSS
JAN
28
4

No surprise. XWF does something other tools don't

Posted by Brett Shavers
in  Digital Forensics
From a twitter post, a cool video on imaging with X-Ways noted (13:50) as doing something other tools don't.  The entire video is actually pretty good too.http://youtu.be/zYYCv21I-1I
0
  1521 Hits
Tags:
X-Ways Forensics
Tweet
Share on Pinterest
Recent Comments
Guest — Phil Rodokanakis
Brett: I saw Scott's presentation a few days ago and noticed the reference he made to X-Ways making a copy of the SMART table befo... Read More
Tuesday, 28 January 2014 09:10
Guest — Stefan Fleischmann
"Depending on the type of interface being used, some S.M.A.R.T.-enabled motherboards and related software may not communicate with... Read More
Friday, 14 March 2014 02:43
Guest — Brian Baskin
Is it possible to have a quick text synopsis of the comments made in the talk? For those of us who cannot watch videos at work, or... Read More
Wednesday, 29 January 2014 23:36
1521 Hits
DEC
09
0

Cool update to the XWFIM, Portable Install

Posted by Brett Shavers
in  Digital Forensics
Eric is at it again.  This time with a pretty cool update to the X-Ways Forensics Install Manager (v0.0.7.0).  The update to the XWFIM now includes an option to create a portable install to external media.   Page 13 of the Practit...
Continue reading
0
  1591 Hits
Tags:
X-Ways Forensics
Tweet
Share on Pinterest
1591 Hits
DEC
06
1

X-Ways Forensics Install Manager

Posted by Brett Shavers
in  Digital Forensics
I cannot imagine anyone who uses XWF not having Eric Zimmerman's XWFIM.   Every time I use it, I wonder how I did without it.  XWFIM is available through the XWF support forum.  It's free, but you need a license for XWF to get it....
Continue reading
0
  3506 Hits
Tags:
X-Ways Forensics
Tweet
Share on Pinterest
Recent comment in this post
Guest — DKein
Works like a charm... Thanks Eric
Friday, 06 December 2013 04:49
3506 Hits
    Previous     Next
1 2 3 4 5 6 7 8 9 10

Brett's blog

Posts List

Tag Cloud

Registry Forensics tor browser University of Washington Virtualization wiretap Placing the Suspect Behind the Keyboard gmail Volume Shadow Copy X-Ways Forensics windows fe privacy surveillance windows forensic environment investigation email case studies training bitcoin RegRipper writing bitcoin forensics North korea presentations Windows Forensic Environment X-Ways Forensics Practitioner's Guide phishing imaging 4cast Jimmy Weg forensics Hiding Behind the Keyboard investigations winfe book Hacker Bitcoin Forensics dfir

Search Blog

Most popular posts

Brett Shavers
Brett Shavers
10 September 2019
The Five Stages of the DFIR Career Grief Cycle
The Five Stages of the DFIR Career Grief Cycle
Digital Forensics
I have been a fan of Craig Ball ever since I met him in a forensic course years ago. I was so impressed with Craig, that I was honored that he agreed to write the foreword of a book that Eric Zimmerma...
1
35051 Hits
0 comments
Read More
Brett Shavers
Brett Shavers
06 December 2015
RegRipper
RegRipper
Digital Forensics
The short story-if you want RegRipper, get it from GitHub (don't download it from anywhere else)http://github.com/keydet89What is RegRipper?RegRipper was created and maintained by Harlan Carvey. ...
0
34474 Hits
3 comments
Read More
Brett Shavers
Brett Shavers
25 April 2019
Game of Thrones, DFIR Style
Game of Thrones, DFIR Style
Digital Forensics
Short post and quick opinion. I came across some tweets today about how bad people are in the #infosec/#DFIR community and I dug a little deeper. Actually, I didn’t have to dig far at all to find trul...
0
32747 Hits
0 comments
Read More

Magnet Forensics Conversation

DFIR Training

Be sure to check out my DFIR Training website for practically the best resources for all things Digital Forensics/Incident Response related.

Even better, support DFIR Training at Patreon and get access to multiple online courses in digital forensics with included ebooks!

http://www.patreon.com/DFIRTraining 

More posts

Date
Date
  • Jessica Hyde and I talk about forensic stuff

    Jessica Hyde and I talk…

    Jessica Hyde and I talk about forensic stuff

    Jessica Hyde of Magnet Forensics sat down together (virtually...) to talk about forensics.  In case you missed it, here it is!

    Thursday June 11

    by Brett Shavers

    8082 hits / 0 comments

  • Facebook Spoofing: Your Reputation, Investigations, and Massive Data Collection

    Facebook Spoofing: Your Reputation, Investigations,…

    Facebook Spoofing: Your Reputation, Investigations, and Massive Data Collection

    A “new” article on imposter Facebook accounts was published today in the Philippines.  I put “new” in quotes because this is not a new issue,…

    Sunday June 07

    by Brett Shavers

    2037 hits / 0 comments

  • You do not want to work in DFIR.

    You do not want to…

    You do not want to work in DFIR.

     The fantasySo many people ask how they can start a career in the DF/IR field, which is completely understandable. The glamour is there. Hollywood shows…

    Thursday June 04

    by Brett Shavers

    1668 hits / 0 comments

  • COVID-19’s Investigative Impacts on Digital Forensics/Incident Response (DFIR). AKA: All burners are now burned.

    COVID-19’s Investigative Impacts on Digital…

    COVID-19’s Investigative Impacts on Digital Forensics/Incident Response (DFIR). AKA: All burners are now burned.

    The meat and potatoesA bit is still a bit and a byte is still a byte. COVID-19 cannot change that, which means that the technical…

    Saturday April 25

    by Brett Shavers

    15380 hits / 0 comments

  • Mini-WinFE 10 and WinFE 10 Updated

    Mini-WinFE 10 and WinFE 10…

    Mini-WinFE 10 and WinFE 10 Updated

    The short story on the newest Mini-WinFE 10 (aka, the download link):Mini-WinFE has been updated and upgraded.  I update WinFE developments (including the downloads for…

    Sunday April 05

    by Brett Shavers

    9190 hits / 2 comments

  • Eat your broccoli first

    Eat your broccoli first

    Eat your broccoli first

    Something good and something not-so-good on learning DFIRThe good thing about learning DFIR is that there are probably fewer barriers and obstacles to learn and…

    Saturday January 18

    by Brett Shavers

    30266 hits / 0 comments

  • The Second Decade of the 2000s is almost over!

    The Second Decade of the…

    The Second Decade of the 2000s is almost over!

    We’ve come a long way in DFIR over the past 20 years, and even looking at just the past decade, the field has drastically grown!…

    Thursday December 26

    by Brett Shavers

    9929 hits / 0 comments

  • Public Records

    Public Records

    Public Records

    I have an outstanding public records request. It is not "outstanding" in the manner that I wrote a great request, but "outstanding" in that I…

    Thursday December 12

    by Brett Shavers

    4745 hits / 0 comments

  • The Five Stages of the DFIR Career Grief Cycle

    The Five Stages of the…

    The Five Stages of the DFIR Career Grief Cycle

    I have been a fan of Craig Ball ever since I met him in a forensic course years ago. I was so impressed with Craig,…

    Tuesday September 10

    by Brett Shavers

    35051 hits / 0 comments

  • Our World is Going to Turn Upside Down with DeepFakes

    Our World is Going to…

    Our World is Going to Turn Upside Down with DeepFakes

    The short storyAny person and their voice, in practically any video (past, present, or future) can have their face and voice digitally replaced with any…

    Sunday September 01

    by Brett Shavers

    3140 hits / 0 comments

  • If you are comfortable in DFIR, you might be doing it wrong

    If you are comfortable in…

    If you are comfortable in DFIR, you might be doing it wrong

    I took a 3-day basic forensic course and embarrassingly enough, the instructor (in front of the class), said that I probably know everything in the…

    Thursday August 29

    by Brett Shavers

    4079 hits / 0 comments

  • Everything I Needed to Know about Working in DFIR, I Learned in Boot Camp

    Everything I Needed to Know…

    Everything I Needed to Know about Working in DFIR, I Learned in Boot Camp

    You don’t need to experience military life to learn the valuable lessons that are drilled into military recruits.  In fact, you can probably enjoy the…

    Saturday August 17

    by Brett Shavers

    5030 hits / 0 comments

  • Personality of a computer

    Personality of a computer

    Personality of a computer

    From a recent discussion that I had with Harlan Carvey about the registry, this topic is something that I touched on lightly in Placing the…

    Wednesday July 31

    by Brett Shavers

    4180 hits / 0 comments

  • Add a Dab of Balance in your DFIR World

    Add a Dab of Balance…

    Add a Dab of Balance in your DFIR World

    Jessica Hyde’s post of Giving Back in DFIR from 2018 is a great write up on contributing to the DFIR community, and I see her…

    Monday June 24

    by Brett Shavers

    14676 hits / 0 comments

  • The Easy Way to Learn DFIR

    The Easy Way to Learn…

    The Easy Way to Learn DFIR

    SummaryThere is no easy way to learn DFIR. You can stop reading from here if you want.Longer versionOk. Since you are still reading, you probably…

    Saturday June 08

    by Brett Shavers

    14021 hits / 0 comments

  • Game of Thrones, DFIR Style

    Game of Thrones, DFIR Style

    Game of Thrones, DFIR Style

    Short post and quick opinion. I came across some tweets today about how bad people are in the #infosec/#DFIR community and I dug a little…

    Thursday April 25

    by Brett Shavers

    32747 hits / 0 comments

  • Puking in DFIR

    Puking in DFIR

    Puking in DFIR

    Admittedly, the title of this post is intentionally gross, because I am going to heave a few things at you, mainly about puking. As in,…

    Wednesday April 17

    by Brett Shavers

    5831 hits / 0 comments

  • The #1 Reason that DFIR practitioners don’t post opinions

    The #1 Reason that DFIR…

    The #1 Reason that DFIR practitioners don’t post opinions

     Lesley Carhart tweeted today that a journalist used one of her tweets in an article that would have been rephrased in a less playful manner…

    Tuesday April 09

    by Brett Shavers

    5926 hits / 0 comments

  • If USB flash drives were shaped like spiders, we wouldn’t have these problems

    If USB flash drives were…

    If USB flash drives were shaped like spiders, we wouldn’t have these problems

    I hate USB drives. My first experiences with the darn things was when I was a young patrol officer and the entire police department was…

    Monday April 08

    by Brett Shavers

    2366 hits / 0 comments

  • Working in DFIR is glamorous, but mostly only to those not working in DFIR...

    Working in DFIR is glamorous,…

    Working in DFIR is glamorous, but mostly only to those not working in DFIR...

    Here is something about the DFIR career field: it is one of the most exciting, eventful, and jam-packed jobs that anyone can have. Running and…

    Friday April 05

    by Brett Shavers

    3922 hits / 0 comments

© 2020 Brett Shavers