AI Has Only Gone on Ride-Alongs With Humanity
AI Has Only Gone on Ride-Alongs With Humanity Some people teach what they know. Some teach what they have done. And some teach what they read in a book and talk as if they did it. That last group is one of my pet peeves, especially since GenAI fits in…
Read More
Your DFIR Tools Are Not the Problem. You Are.
DFIR keeps trying to solve human problems with more software. We add parsers, automation, and larger forensic suites. None of that solved the human problems, so now we added artificial intelligence. Each tool promises to find more evidence in less time,…
Read More
AI Will Have to Pry Judgment from my Cold, Dead Hands
AI is not waiting outside your front door for permission. It is already inside your kitchen and eating your lunch. Now, what are you going to do about it? Side Note: If you are the type of person who thinks a ‘polished’ AI report is a substitute for a…
Read More
AI Can Build a DFIR Course in Minutes. So What Are You Really Paying For?
Every training provider should ask themselves this question before someone else asks it for them. “If AI can reconstruct a course outline in seconds, how does the value proposition rest solely on the curriculum?” Upload almost any DFIR syllabus into any…
Read More
Will Tomorrow Be Your DFIR ‘Mann Gulch’?
Most DFIR training teaches tools. Timelines. X-Ways filters. Database analysis. Registry carving. But it rarely teaches judgment, even though judgment is what saves (or sinks) an investigation when the evidence refuses to cooperate. I understand, tho.…
Read More
The difference between “No one will hire me” and “I am no longer professionally allowed to do this DFIR work”
A recent discussion on LinkedIn about DF/IR accountability made me realize that several people, including (or mostly…) me, were using the word “accountability” to mean entirely different things. That’s important because
Read More
Don’t Marry the Suspect
Bad investigators look for proof they were right. Good ones look for where they are wrong. The fastest way to damage an investigation is to fall in love
Read More
Forensics First. AI Second.
AI found it. You prove it. From Artifact to Defensible Casework Decisions. I bought an AI-ready computer for testing and started running a local LLM against test data and CTFs. It’s a little more complicated
Read More
That Time I Bought Coke on a Skateboard
What undercover drug buys taught me about trust, judgment, and the DFIR investigative mindset. Buying dope is easy.
Read More
AI is Eating Itself
Google made answers easy. AI is making us source-blind. “Ask the chatbot and get an answer.” That sounds good until you ask where the answer came from, who created it, who verified it, who updated it.
Read More