- Tools & Artifacts – Windows – new entries added – LogMeIn, ExpressVPN, Time Rules (Win11), SRUM, Quick Access, FileZilla, WSH, OneDrive in $MFT, VirtualBox, Chrome Deleted History, File Extension Associations, Browser Artifacts, Registry, and OneDrive.
- Tools & Artifacts – Android – new entry added – Kik Messenger and Android Reset Data
- Tools & Artifacts – iOS – new entries added – Deleted SMS/iMessage, KnowledgeC.db Notifications, and Sysdiagnose
- Tools & Artifacts – File Systems – new entry added – $I30 Files
- Books – new entry added – Crafting the InfoSec Playbook
- Jobs – old entries cleaned up, new entries added – BlackBerry, Citi, Tracepoint, Discovery, and Prudential Financial
- Monthly Page – Updated to the SANS Difference Makers voting! Voting closes Thursday, November 10 at 5:00 PM EST.
AboutDFIR stickers are still a thing! If you’re interested in one, please let us know! Here’s what they look like:
Busy update!
Happy One Extra Hour of Sleep Day, if you do Daylight Savings!
Cassie (DFIRDetective)
