I am pleased to announce that I will be presenting my research on the Windows 8 Prefetch at SANS Institute's DFIRCON.  The conference ...

This weekend I was working on some memory analysis using Volatility, and I came across a sample that had a malicious process named svchost.e...

I am currently working on a PowerShell module that will provide a remote forensic capability for forensicators and incident responders alike...