Main Takeaways Useful Note-taking and reporting requires explicit planning and goals. Organizing information is just as important as the content. Tips have been collected into the DFIR Notetaking Cheatsheet on Github. Introduction Since I've been working in DFIR full-time, I've been on a mission. I want to answer a question, a key question, I'm sure … Continue reading DFIR Note-Taking and Report Guide
Forensic Science
Investigation Framework | Part 6 – Intelligence Correlation
Investigation Framework Incident Scoping Evidence Collection Analysis Correlation Timeline Analysis Intelligence Correlation Reporting Intelligence Correlation There’s one last piece of “analysis” left to do with your evidence. It’s time to take what you know and look for any similarities to know intelligence. The best way to summarize this section is “Find out if anyone else … Continue reading Investigation Framework | Part 6 – Intelligence Correlation
Investigation Framework | Part 4 – Correlation
Investigation Framework Incident Scoping Evidence Collection Analysis Correlation Timeline Analysis Intelligence Correlation Reporting Correlation Welcome back, hopefully you’ve had a chance to take a break and refill your caffeine of choice. Findings only provide half the answer when dealing with investigations. As an analyst, your job is not only to discover findings but to also … Continue reading Investigation Framework | Part 4 – Correlation
Transitioning from Forensic Science to Digital Forensics
If you scroll down and look at the earliest content on this site you'll see a couple posts about forensic science. Truth is, when I was seriously considering a career I was hyper focused on becoming a forensic scientist. Either a crime scene tech, state crime lab, or for an forensic science research organization. I … Continue reading Transitioning from Forensic Science to Digital Forensics
Blood Splatter vs. Blood Spatter
Perhaps, my favorite subject in all of Forensic Science. It's about analyzing the trajectory, size, and pattern of blood, but what is it called? Everyone who has studied the topic knows there is a debate on whether it is called Blood Splatter Analysis or Blood Spatter Analysis. Both words make sense in general. So let's … Continue reading Blood Splatter vs. Blood Spatter
CSI vs. Reality
How accurate are TV Shows like CSI?
ChocolateCoat4N6 