AI Can Build a DFIR Course in Minutes. So What Are You Really Paying For?
Every training provider should ask themselves this question before someone else asks it for them. “If AI can reconstruct a course outline in seconds, how does the value proposition rest solely on the curriculum?” Upload almost any DFIR syllabus into any…
Read More
Will Tomorrow Be Your DFIR ‘Mann Gulch’?
Most DFIR training teaches tools. Timelines. X-Ways filters. Database analysis. Registry carving. But it rarely teaches judgment, even though judgment is what saves (or sinks) an investigation when the evidence refuses to cooperate. I understand, tho.…
Read More
The difference between “No one will hire me” and “I am no longer professionally allowed to do this DFIR work”
A recent discussion on LinkedIn about DF/IR accountability made me realize that several people, including (or mostly…) me, were using the word “accountability” to mean entirely different things. That’s important because
Read More
Don’t Marry the Suspect
Bad investigators look for proof they were right. Good ones look for where they are wrong. The fastest way to damage an investigation is to fall in love
Read More
Forensics First. AI Second.
AI found it. You prove it. From Artifact to Defensible Casework Decisions. I bought an AI-ready computer for testing and started running a local LLM against test data and CTFs. It’s a little more complicated
Read More
That Time I Bought Coke on a Skateboard
What undercover drug buys taught me about trust, judgment, and the DFIR investigative mindset. Buying dope is easy.
Read More
AI is Eating Itself
Google made answers easy. AI is making us source-blind. “Ask the chatbot and get an answer.” That sounds good until you ask where the answer came from, who created it, who verified it, who updated it.
Read More
Your Digital Forensics Degree Is Already Outdated. Now What?
An expensive checkbox Unless you are subsidized or earned support somehow, a degree can be a financially expensive and time consuming checkbox. It can get your application past a screening filter.
Read More
Stop Building Shrines to Your Own Bias
‘Thinking like an investigator’ is not the same as having an ‘investigative mindset.’ Walk through any conference hall or search online and you’ll see it everywhere. Booth after booth, search result after search result, all promising some version of the…
Read More