Technologist working in digital forensics and DFIR. Forensic lab manager. Software developer. SysAdmin and DevOps. Comments are my own.
California, USA
Joined January 2010
- Tweets284
- Following234
- Followers113
- Likes34.1K
From the “Podfather” himself, a beautifully refined, professional podcasting software package. Free, check it out:
1
11
Greg Tassone retweeted
1/ EZ Tools 2026.10 is out, all on .NET 10 (LTS)
✅ More accurate: 331K more event log records, hive logs replayed as Windows does, every test hive loads
⚡ Faster: up to 9x; EvtxECmd and Registry 2x
📉 Less memory: up to 82% less
Update with Get-ZimmermanTools 🧵 #DFIR
New version released of the Project VIC Category parser:
v2.1 released of this Python-based tool, useful for LE working in digital forensics with *Project VIC* files. It parses the Project VIC JSON format and allows the inspection/extraction of hashes and internal data:
github.com/fcgreg/VIC-CatPar…
1
1
37
To my friends I see annually at the Techno Security/Digital Forensics (West) conference: Hard to believe but it's only 4 weeks away. If you haven't signed up already, here's a 10% discount code you can use: ADV26
We're in San Diego again. Looking forward to seeing you there: technosecurity.us/west
36
Greg Tassone retweeted
bulk_extractor 2.2.0 is out: a security and reliability release fixing CVE-2026-24857, with a standalone 64-bit Windows build, Windows raw-device input, runtime scanner plug-ins, improved Wi-Fi PCAP handling, and more.
github.com/simsong/bulk_extr…
#DFIR #DigitalForensics
Here's a great article on modernizing long-living software for newer language implementations and conventions, courtesy of @xchatty and @codeslack
Highlighted in this paper is the new v2.x of #bulk_extractor which is currently production-ready:
doi.org/10.1145/3600098
1
2
59
Greg Tassone retweeted
We just released Hibernation Recon v1.2.3.96 with some awesome updates - Windows 24H2 & 25H2 support, new decompression algorithms, now runs on Windows on Arm & Linux, etc. How do you analyze Windows hibernation? ArsenalRecon.com #DFIR
Greg Tassone retweeted
Here’s something you don’t see every day in #DFIR - launching a virtual machine from a Linux laptop (safely booted with WinFE) connected to Arsenal Image Mounter across a network via AIM Remote Agent! ArsenalRecon.com
Greg Tassone retweeted
Exploring @thelazza’s new release of Fuji for Mac acquisitions sparked a fun take on making a “Fuji Cartridge” necessary for it to replicate to RAM-disk in recovery mode.
fujiapp.top
Those of you that aren’t very up-to-date on the state of AI technology today, at this moment, please read this:
1
66
Greg Tassone retweeted
Today marks the release of our new desktop environment, @COSMIC_desktop , alongside Pop!_OS 24.04 LTS—allowing us to provide our users what they want and to innovate further. There’s a ton of new customization and productivity features to explore!
Pop!_OS 24.04 was released earlier today alongside a letter from @carlrichell on the @system76 blog. Thanks for your patience as we built something incredible for you!
Greg Tassone retweeted
Kagi News features a "Today in History" section that brings you fascinating moments from the past, right alongside your daily news briefing.
New to Kagi News? blog.kagi.com/kagi-news
Greg Tassone retweeted
Have you seen computers booted with @SUMURIForensics PALADIN launched into virtual machines over a network? vimeo.com/1138949857. ArsenalRecon.com #DFIR
Greg Tassone retweeted
Have you saved your spot for Techno Security West 2025 yet?
📍 San Diego, CA | 📅 October 27–29, 2025
🔗 Register now: technosecurity.us/west/regis…
#TechnoSecurity #SanDiego #TechnoWest2025
Greg Tassone retweeted
Good news, iLEAPP v2.3.0 release is out, go grab it now!
New features :
- Support of iTunes encrypted backups
- New Unified Logs artifacts
- Progress / status count to console output
Parser Updates:
- Improve media file lookup speed (~20x faster)
- New modules : Sysdiagnose, AMDSQLiteDB, Airbnb messages, Potato Chat Parser, CashApp, User defaults
- Modules updated for LAVA output
github.com/abrignoni/iLEAPP/…
