Practitioner-first digital forensics writing

Find what others miss

Deep dives into NTFS, memory forensics, incident response, and the tools powering real investigations. Written for practitioners, by a practitioner.

articles

topic areas

Free

always

Latest

Recent deep-dives

Let's explore Cellularusage.db. It is a database that records data of SIM cards inserted into an Apple iPhone device.

Coverage

Focused deep-dives across the core disciplines of digital forensics.

MFT attributes, $LogFile, USN Journal, carving

Volatility, process analysis, malware artifacts

Triage, timeline analysis, artifact correlation

Hands-on tutorials with real forensics tooling

Structured courses with hands-on labs — coming soon. Subscribe to be notified.