#digital-forensics

What Happens When Evidence, Alerts, and Executives Can All Be Faked?

A police department receives a video “confession” that later turns out to be fabricated. A bank’s fraud team approves a large transfer…

Phone and Device Access: Can You Read Your Spouse’s Text Messages or Emails?

Phone and Device Access

EHAX RecCTF 2026 • Not What It Seems

DIGITAL FORENSICS • MULTI-LAYER FILE ANALYSIS

MOBILE FORENSICS INVESTIGATION- OPERATION SIM SHIFT

Introduction

How to Recover Deleted Browser History: What Really Happens After You Clear It

You clear your Chrome history, close the browser, and assume the record is gone.From the browser’s point of view, it may be.

My First Network Forensics Case: Solving “Packet Maze” with Wireshark and Linux

By an MSc Digital Forensics student, writing about what I actually did — step by step.

MBR and GPT Analysis

This blog is completely dedicated to the MBR & GPT Analysis, but before diving in the analysis it is important to understand the MBR & GPT…

Operation Broken Shield: A Complete UK OSINT CTF Walkthrough (Phase 1–5)

Portfolio Project | Open Source Intelligence (OSINT) | Digital Investigation | CTF Walkthrough

LetsDefend Practical Case: Corporate Policy Violation | Browser Forensics | Incident Responder…

Analyzing Browser Data to track users’ activities

Essential Steganography Tools Every Cybersecurity Student Should Know

Steganography is the practice of hiding secret information inside another file, such as an image, audio file, video, or document, so that…

CyberTalents CypherAnxiety -Write-up

Challenge Name: Cypher Anxiety

Can You Trace a Hidden Beacon to Its Source?

Every file tells a story.

Top Emerging Forensics Disciplines in Digital Investigations

How Next-Generation Forensic Sciences Are Transforming Digital Investigations, Cybersecurity & Legal Evidence in India

From JWT Manipulation to Splunk Analysis Investigating a Multi Stage Web Application Compromise

“Attackers exploit vulnerabilities. Investigators connect evidence. Great security professionals understand both.”

HTB Sherlock APTNightmare

In today’s box I would be solving HTB sherlock APTnightmare link here ->…

How One Digital Forensics Assignment Changed How I See Cybersecurity-Cyberpathacademy

I’ve spent the last few months building CyberPath Academy, a free cybersecurity learning platform. People usually ask about the SOC Analyst…

Choosing the Right Acquisition Method in Android Forensics

Acquisition is where most Android forensic cases are actually won or lost — before any parsing tool opens a report. I learned that…

Recovering Deleted Logs and Files After a Cybersecurity Incident

How to Preserve Original Storage, Reconstruct Deleted Data, and Avoid Destroying Digital Evidence

Cyber Talents CTF Walkthrough: I love Music

This challenge before us has given us a dataset in the form of an audio file to listen to. And if we listen well enough, we’ll get our flag…

OSINT Is Not a Spy’s Toolkit

Videos posted on Facebook became evidence before the International Criminal Court. What changed was not the tools. It was the method.

Analyzing a Linux/Ext4 disk image using The Sleuth Kit (TSK) and other utilities — PART-1

Hello Everyone! Welcome back, I hope you’ll are doing great. In this write-up we’ll walkthrough a linux/ext4 disk image and try to analyze…

Investigating Windows 10 Disk Artefacts: An Autopsy Case Study

Executive Summary

Gelöschte Dateien und E-Mails wiederherstellen: Ein technischer Leitfaden

In modernen IT-Infrastrukturen ist Datenverlust selten ein singuläres Ereignis, sondern meist das Resultat einer Kette von Fehlern — sei es…

Investigating a Malware Infection Using Splunk: From Initial Compromise to Data Exfiltration

As part of my cybersecurity training and SOC-focused lab practice, I recently completed a simulated incident investigation using Splunk…

PsExec Hunt

Network Forensics Case Write Up

Cyber Talents CTF Walkthrough: F0xy

Here before us is an easy-level room from the Cyber Talents platform titled “F0xy.” It’s supposed to be easy, but in truth it took me a lot…

TryHackMe Blizzard — Complete Walkthrough

Tracing a sophisticated APT attack from initial phishing to data exfiltration

Digital Forensic Examiner Skills in 2026: The $41K Automation Gap

The biggest salary gap in Digital Forensic Examiner hiring doesn’t run between seniority levels. It runs between candidates who can script…

Mini Digital Forensic Investigation: Analisis Metadata File Menggunakan The Sleuth Kit …

BITSCTF 2026 Writeups | OSINT And Steganography / Forensics Challenges

Solving OSINT And Steganography challenges in BITSCTF 2026 Using zsteg , cyberchef , reverse image search , strings , exiftool and other…

Freakquency | BlueHens CTF 2026

Solved By : Z3DX

Phishing Attacks: Detection Methods, Prevention Strategies, and Case Studies

Introduction

Behind the clock | Detecting Timestomping in Windows

Hello! and welcome back everyone. In this write-up we’ll go through few methods to detect timestamp manipulation of files in NTFS. We’ll…

Osama Returns to the Headlines: Coincidence, Anniversary, or Narrative Building?

In the middle of 2026, an interesting pattern began to emerge across international media. After years of receiving relatively limited…

Mobile Forensics Investigation | Digital Forensics

In digital forensics, the phone speaks and confesses to several matters related to the crime!! Through its confessions, we can grasp a…

Digital Forensics Services in Bangalore & Across India

Digital Forensics

DockerLabs CTF: Countdown Walkthrough — WPvivid RCE & Advanced Hex File Reconstruction

The transition from structured Capture The Flag (CTF) environments to the unpredictable landscape of live bug bounty hunting — on platforms…

DISKO 3 | PicoCTF Challenge Writeup

Part 3: Identifying and Extracting Hidden Artifacts using Disk Forensics

Why Real-Time Network Visibility Is Critical for Cybersecurity in 2026

🚨 Cybersecurity Insight (2026): Why Network Visibility Is Now Critical for Defense

Users Lie. Databases Don’t: Querying Browser History During Incident Response

How to retrieve and analyze Chrome, Edge, Firefox, and Safari history using XDR response actions and SQLite.

I Built a Forensic Snapshot Daemon in Python — And GitHub’s Copilot Found Bugs in It

Building SecSnap: a real-time system monitor for SOC and DFIR workflows, and what I learned when automated security review flagged my own…

Ghosts in the RAM: A Field Guide to Memory Forensics

One hunt, two altitudes — from a process-level intrusion down into a kernel rootkit

How I Hunted a Telegram RAT Using Only RAM: A Memory Forensics Walkthrough with Volatility 3

What happens when a machine gets infected and no one notices — until it’s too late? The answer lives in RAM.

Digital Forensics: The Ultimate Enterprise Guide to Digital Evidence Investigation in 2026

As organizations become increasingly dependent on digital infrastructure, cyber incidents have evolved from occasional disruptions into…

GreymHatter v2: A DFIR Distro for Teaching, Casework, and Apple Silicon

GreymHatter is an open source digital forensics and incident response (DFIR) distribution built on Fedora Linux. It runs on AMD64 and ARM64…

Where Hidden Crypto Actually Hides in a Divorce

When a family-law attorney suspects a spouse is hiding cryptocurrency, the instinct is to go straight to the chain. Find the wallet, follow…

How Security Analysts Use GlassWire for Threat Hunting and Incident Response?

Most cybersecurity investigations don’t begin with a ransomware alert or obvious malware warning. They start with a suspicious network…

Adli Bilişim (Digital Forensic) Pusulası #2 — İmajlama: Kopyala-Yapıştır Neden Yetmez?

Geçen yazıda orijinale dokunmamak gerektiğini konuştuk. Peki o kopyayı nasıl alıyoruz?

CyberDefenders: Insider Walkthrough

Following the evidence left behind inside a forensic image.

CyberDefenders The Crime Walkthrough: Reconstructing a Murder Investigation Using ALEAPP

CyberDefenders · Endpoint Forensics · ALEAPP · Android Forensics · Timeline Reconstruction