The DFIR Spot
Home
Blog
About
More
DFIR at your fingertips
Investigating a Compromised Web Server
Artifacts of Execution: Prefetch - Part One
Windows Artifacts For Intrusion Analysis: A Treasure Trove of Evidence