The current blog is in continuation of Part 1 of Windows Triaging with Powershell. Part 1 described how the Powershell functions can be used to parse the Windows Event Logs. …

Intelligence gathering is becoming increasingly important to organizations today. In addition to the Internet, they are also using the Deep Web and Dark Web to gather the kind of information that would help them gain an edge over their competitors. But what exactly is intelligence? The term intelligence simply refers…

This is the part 1 for Triaging a Windows system with Powershell. …

Memory Forensics is forensic analysis of computer’s memory dump, according to Wikipedia. In short, first we have to create the dump of the main memory and then for further analyzing the dump, we use several Dump Analysis tools. Memory Forensics include the both Volatile and Non-Volatile information. For those who…

For a long time, I’ve been wondering to crack mobile lock screen passwords. Well, with use of many Mobile Forensic Tools and Password Cracking tools that are available in the market does that thing but even commercial software comes with some limitations. So that leads to me search the web…

The term “Forensics” itself tells that we are going to deal with some evidence that we are supposed to submit in court and also maintaining the integrity of the evidence as well as prepare a detailed documentation about the procedure that is followed. “Digital Forensics” deals with Forensic investigation of evidence including Digital evidence for e.g. Computer, Mobile, DVR, CCTV, USB, E-Mail, Cloud, IoT and list of number of digital media even Play Station, XBOX and Printers etc. There is a standard Forensic procedure we follow throughout our investigation i.e. Identification, Preservation, Collection, Analysis, Documentation and Presentation.