JJJeji Jamesinjeji-james.hashnode.dev·5d ago · 9 min readDigital Forensic Investigation Using Windows Security Event LogsIntroduction In cybersecurity, knowing how to investigate a compromised system is just as important as knowing how to defend one. Digital forensics is the process of collecting, preserving, and analys00
GGGiovanni Galarzaingiovannigalarza.hashnode.dev·May 28 · 5 min readThe Game PlanThe plan is simple really: learn enough DFIR to land a job in about a year. I also want to be able to make this as affordable as possible. This means the only thing I want to spend on are any certific00
JJebitokinsharonjebitok.com·May 8 · 35 min readAI Forensics (TryHackMe)Introduction The world of Digital Forensics is full of pieces needing to be connected, often under a time constraint. This can be a challenging task, but one that many forensics analysts have accompli00
Xx-originating-ipinx-originating-ip.hashnode.dev·Apr 30 · 8 min readBuilding 'nandtap': Dumping a Cisco Meraki Z1 NAND via Raspberry Pi GPIO Without Removing Chip from BoardTL;DR: https://github.com/x-originating-ip/nandtap As part of some personal upskilling, I wanted to get a better feel for what edge-device forensics actually looks like in practice. It’s one of those 10
Rrathsarainrr-dfir.hashnode.dev·Mar 22 · 14 min readCatching What Windows Hides: A Hands-On NTFS Forensics WalkthroughA hands-on walkthrough of MBR partition analysis, NTFS boot sector examination, Master File Table record inspection, and deleted file detection using hex editors and professional forensic tools. Unde00
Rrathsarainrr-dfir.hashnode.dev·Mar 22 · 8 min readData Hiding Techniques in GNU/Linux OSAn in-depth technical examination of data concealment methods within GNU/Linux covering ext3/4 file system internals, superblock and descriptor slack, inode-level deletion mechanics, and network-layer00
Rrathsarainrr-dfir.hashnode.dev·Mar 22 · 10 min readData Hiding Techniques in Windows OSAn in-depth technical examination of data concealment methods within the Windows NTFS ecosystem, covering file system internals, partition manipulation, ADS exploitation, slack space abuse, and crypto00
JJebitokinsharonjebitok.com·Mar 20 · 4 min readDev Diaries (TryHackMe)Introduction The Dev Diaries challenge simulates a real-world scenario: a client's website was built by a freelance developer who disappeared without handing over the source code. With only the primar00
SDSuvro Debnathinsuvro.hashnode.dev·Feb 1 · 3 min readA Privacy-First Way to Find Where an Image Was TakenIn the world of digital forensics and OSINT, metadata is the ultimate storyteller. A single JPEG can reveal the exact GPS coordinates, the altitude of the photographer, and even the direction the camera was facing. But there has always been a glaring...00
JJebitokinsharonjebitok.com·Jan 27 · 2 min readConfidential - PDF x QR Code Scan (TryHackMe)Introduction This challenge focuses on PDF forensics and steganography techniques. The scenario involves a confidential document from alleged "black hat hackers" containing a hidden QR code that's been covered by another image layer. Our objective is...00
