The official DFIR Training account and most complete #DFIR online resource. Managed by @Brett_Shavers.
Joined August 2016
- Tweets15.6K
- Following412
- Followers17.6K
- Likes13K
DFIR Training retweeted
Week 43 - 2026 #DFIR
thisweekin4n6.com/2026/10/25…
DFIR Training retweeted
Know where the evidence lives.
This FOR585 poster maps iOS and Android artifacts, retention, acquisition paths, SQLite queries, and free tools for investigating app data, device activity, and mobile malware.
👉 go.sans.org/TZlo1i
#MobileForensics #DFIR
DFIR Training retweeted
Patched PHP2Shell? Now investigate what’s already there.
Jeff Hamm, Binalyze's Forward Deployed Security Architect, on hunting for webshells and persistence left before the patch, with companion Sigma and YARA rules to get you started: binalyze.ai/blog/investigati…
DFIR Training retweeted
Generic chatbots guess. In forensics, guessing destroys cases.
BelkaGPT is purpose-built for DFIR: 100% offline, directly cites source artifacts, and admits when evidence isn't found instead of hallucinating answers.
Watch the breakdown: eu1.hubs.ly/H0zkbDC0
DFIR Training retweeted
Looking for an Oxygen Forensics alternative?
Switch to Belkasoft X without leaving your existing work behind. Match your renewal price, open .ofb images with zero downtime, add computer forensics & offline AI, and order through your existing reseller:
eu1.hubs.ly/H0zh35y0
DFIR Training retweeted
In this new eBook, "No surprises on the stand", you'll get a practical framework to help prosecutors and digital device examiners prepare together, identify issues early and walk into court better prepared.
Download the eBook: magnetforensics.com/resource…
DFIR Training retweeted
Blogs aren't long when the content is relevant, and in this case, super-revelant.
DFIR OGs who vent unfiltered, frustrated ramblings are my favorite sources of learning how to get sh*t done without needing to get another degree.
A blog about our AI panel at the #DFIRSummit is here. smarterforensics.com/2026/10… These are my takeaways. It’s long, grab a drink and read it. Ignore typos… I finally just decided enough was enough. Links included for resources. Thanks @JennElston for the help!
DFIR Training retweeted
Belkasoft X v2.12 improves Android agent-based acquisition for modern Android releases. Run the agent via USB flash drives for on-site acquisitions, collect SMS and call logs, and save extracted evidence directly to custom folders.
Explore the highlights: eu1.hubs.ly/H0zf0_n0
DFIR Training retweeted
Why hasn't automated triage fixed alert fatigue?
Our 2026 research found that 67% of CISOs using AI for triage still can't completely trust it. 71% believe AI should be powerful for triage but isn't being used correctly.
Read the report: binalyze.ai/2026-state-of-so…
DFIR Training retweeted
Join us Oct 21 for a special replay of our #AskMeAnything session: Accelerating #IncidentResponse with digital forensics at scale. Learn how #DigitalForensics can help determine root cause, uncover the full scope of an incident, and preserve evidence: ow.ly/ILsc50ZYUJK
DFIR Training retweeted
Containing a data breach is only the beginning. The bigger question is: What actually happened?
Learn how a forensic-first approach can help organizations scope breaches, guide remediation, and make evidence-backed decisions with confidence: ow.ly/3IQZ50ZZ31U
#DFIR
DFIR Training retweeted
🚨 300 potential threats ignored every day.
Our 2026 State of the SOC Report is featured in Interface Magazine, highlighting why overwhelmed SOCs need more than alerts.
They need investigative clarity.
Read the coverage 👇
interface.media/blog/2026/10…
DFIR Training retweeted
Week 42 - 2026 #DFIR
thisweekin4n6.com/2026/10/18…
DFIR Training retweeted
I've never publicly demonstrated a real investigation as records arrive, questions develop, and hypotheses change.
But I am this week.
Get into my head to see how I think when examining evidence, personal accounts, and events.
Challenge what I think by looking at the same evidence. That's what you should be doing at your workplace anyway.
This is how I do it and you'll see it live, for real.
brettshavers.com/dont-follow… #DFIR
DFIR Training retweeted
What is the best first step in a DFIR case?
Discover more in our article 𝐓𝐢𝐩𝐬 𝐭𝐨 𝐎𝐩𝐭𝐢𝐦𝐢𝐳𝐞 𝐃𝐅𝐈𝐑 𝐀𝐧𝐚𝐥𝐲𝐬𝐢𝐬 𝐓𝐢𝐦𝐞 𝐢𝐧 𝐁𝐞𝐥𝐤𝐚𝐬𝐨𝐟𝐭 𝐗 at eu1.hubs.ly/H0z6_sl0
0%Define one question
0%Image every device
0%Hash all files
0%Enable all carving
0 votes • Final results DFIR Training retweeted
🎤 Join ADF at #TechnoWest on Oct 20!
🔎 11:30 AM PDT — Live Mobile & Computer Triage with David Colvin
🎤 3:15 PM PDT — The First 60 Minutes of Digital Evidence with Richard Frawley
📍 Booth #206
🤝 Book a meeting: hubs.ly/Q04BnBS60
#DigitalForensics
DFIR Training retweeted
The digital forensics community is coming together in San Diego for @technosecurity & Digital Forensics Conference! 🔍
📅 October 20–22
📍 San Diego, CA
👋 Come see us at booth 212!
DFIR Training retweeted
Opposing counsel reads industry headlines too.
You shouldn't have to defend a software vendor on the witness stand. Belkasoft X natively mounts Oxygen .ofb files so you can independently verify your mobile evidence.
Verify your cases today: eu1.hubs.ly/H0z5Rk-0
DFIR Training retweeted
On October 21, join us for a webinar that will demonstrate how Magnet #Autokey provides fast access to encrypted vehicle data and helps investigators accelerate time-to-evidence with streamlined collaboration in Magnet #Review: ow.ly/SkOb50ZY8Xn
#DFIR
DFIR Training retweeted
2,047 alerts. Every day.
For enterprises with 5,000+ employees, the daily total climbs to 3,115.
No team can investigate that manually. And automation built on telemetry alone can't be trusted to do it for them.
See the full breakdown: binalyze.ai/2026-state-of-so…