Should DF Be Separated from IR?
Digital Forensics and Incident Response (DFIR) is a term frequently used in the cybersecurity world, often without fully understanding the distinct roles of Digital Forensics (DF) and Incident Response (IR). While these fields share tools, training, and…
Read More
Empowering 1,000 DFIR Professionals with a DFIR Investigative Mindset
Over the years, I’ve had the privilege of working alongside many talented individuals in the DFIR communities in both the public and private sectors. Our field is ever-evolving, with new tools and technologies emerging at a rapid pace. Yet, despite…
Read More
Why DFIR Investigative Thinking is Critical—and Why It’s So Hard to Teach
Why DFIR Investigative Thinking is Critical—and Why It’s So Hard to Teach In DFIR, the investigative mindset is the difference between solving cases and missing crucial evidence. While we’ve become skilled at teaching tools, certifications, and degrees,…
Read More
Today, I rant
AKA: The Last Thing We Want in DF/IR is the First Thing We Need in DF/IR, Part Deux TL:DR DFIR standards are a mess. They are a confusing, convoluted, and chaotic disaster that’s doing more harm than good. And we have no one to blame but ourselves.…
Read More
Placing the Suspect Behind the Keyboard: How Full is Your Gas Tank?
One of the most critical tasks in digital forensics and incident response (DFIR) is attributing a cyber incident or crime to a specific suspect. This process, referred to as placing the suspect behind the keyboard, requires meticulous analysis, evidence…
Read More
The key to DFIR mastery
Have you been spending years and thousands of dollars on training, earning certifications, getting degrees, testing tools, researching, and writing blogs? Have you been frustrated, stressed, and overwhelmed in searching for the mystical golden key to…
Read More
The Multiverse of a DFIR Case
I’m going to give a few tips to prevent you from wrecking your next case. First, consider that every case is like standing in a maze with an infinite number of doors, each leading an entry to a different universe with a different case outcome. All…
Read MoreEthics of Plagiarism Allegations
TL:DR I was wrongly accused of plagiarism, but the accuser has privately admitted their mistake. Due to the lack of a public retraction, I am compelled to clarify the situation myself. Overview In the spirit of transparency within our community, I am…
Read More
Let me break your mind, DFIR.
TL:DR (too long; didn’t read) The DFIR Investigative Mindset book is available on Amazon now at https://amzn.to/4apGxAX. The book launch ended on Day 2 with 400 copies sold in the book launch, with an additional 1,279 copies ordered from…
Read More“DFIR Investigative Mindset” Release Hits a Snag – Here’s What’s Up
So, you’ve been counting down the days until you could get your hands on “DFIR Investigative Mindset,” right? March 22 was marked in your calendar, and if you’ve been wondering why you can’t purchase what’s intended to…
Read More