Developers of digital forensics weapons which include Arsenal Image Mounter, Hibernation Recon, LevelDB Recon, HBIN Recon, & Registry Recon. Arm Yourself! #DFIR
Boston
Joined August 2012
- Tweets1.4K
- Following1.2K
- Followers3.5K
- Likes402
Arsenal Recon retweeted
Week 44 – 2025 #DFIR
thisweekin4n6.com/2025/11/02…
Arsenal Recon retweeted
Thanks to everyone joining virtually and in-person for the presentation on @WindowsFE
I learned a ton from the experience. I hope those that joined did too.
Arsenal Recon retweeted
Want a quick guide to get started with @ArsenalRecon's Remote Agent using @WindowsFE? Here is one way to go about it:
youtu.be/pgPZVA5nKs8
Arsenal Recon retweeted
Stayed up late to virtualize my machine booted to @WindowsFE over the wire with @ArsenalRecon.
Bonus: I found and installed the necessary driver in #WinFE for the machine’s ETH0 to make it work!
Arsenal Recon retweeted
Considerations include protecting the integrity of internal storage, invasiveness, likelihood of success, time, & yes, cost. What if it's a personal device, not corporate? If the user does not know/refuses to provide the BitLocker Recovery Key & Microsoft doesn't have it? #DFIR
Arsenal Recon retweeted
After putting the kid to bed and before I go to mine:
- Est. baseline of an Ubuntu drive
- Connect with @ArsenalRecon Remote via @WindowsFE
- Image over the wire and match MD5 with baseline
- Entertain myself with the possibilities
Arsenal Recon retweeted
Yes, once AIM is connected to a remote disk served up by WinFE & AIM Remote Agent across a network, you can interact with it as if it was a "real" disk attached to your forensic workstation... so you could use AIM to obtain a disk image, or any disk imaging tool you want! #DFIR
Arsenal Recon retweeted
Think You Don’t Need WinFE? Wait Until You Do. brettshavers.com/brett-s-blo… #DFIR
Arsenal Recon retweeted
Oh wow... That's a blast from the past. I remember LiveView. I also remember all the blue screens. It was still a great research project at the time.
I love AIM. So, so useful.
Arsenal Recon retweeted
1990: Clifford Stoll's book "The Cuckoo's Egg" was turned into an episode of NOVA entitled "The KGB, the Computer, and Me". To avoid spoiling it, let's say it's a story of how he tracked down a hacker who broke into his employer's computer. Watch for free! archive.org/details/The_KGB_…
Arsenal Recon retweeted
We want to send a big THANKS to @ArsenalRecon for supporting our Digital Forensics program with great tools to help our students learn #DFIR
Arsenal Recon retweeted
🚀 Melbourne, here we come! 🚀
Our first Australia Training Event is almost here.
A huge thanks to our generous sponsors:
Arsenal Recon
exterro
GetData
Monolith Forensics
Paraben
Passmark - OSForensics
Interested in sponsoring? Contact [email protected].
Arsenal Recon retweeted
If you work in the #DFIR space and are not using @ArsenalRecon's Image Mounter in Professional Mode, you are missing out. Fantastic and invaluable tool.
Arsenal Recon retweeted
Happy April Fools' Day, but this is no joke! It's time for a new 13Cubed episode I'm calling "The Ultimate Guide to Arsenal Image Mounter." Enjoy! youtube.com/watch?v=4eifl8qv… #DFIR
Arsenal Recon retweeted
Week 01 - 2024 #DFIR
thisweekin4n6.com/2024/01/07…
Arsenal Recon retweeted
There were heavy hitters providing training to child exploitation investigators this week at the Provincial ICE Strategy Conference. Arsenal participated by running a half-day workshop showing investigators how to get access to suspects secrets faster & more effectively. #DFIR
Arsenal Recon retweeted
I took this course and highly recommend you do too! #DFIR
Arsenal Image Mounter (AIM) is an extremely powerful digital forensics tool that goes well beyond mounting disk images. If you would like to get the most out of AIM, buy the recently updated AIM Online Training (& certification) today for only $158! sumuri.com/course/arsenal-im… #DFIR
Arsenal Recon retweeted
Using Arsenal Image Mounter, but not sure how to make the best use of its powerful features in your casework? Buy AIM Online Training (& certification) now & you will have access to not only the current training but a major update coming August 1st! sumuri.com/course/arsenal-im…
#DFIR
