Greg Tassone (@fcgreg) header
Greg Tassone (@fcgreg) profile picture

Greg Tassone

@fcgreg

Technologist working in digital forensics and DFIR. Forensic lab manager. Software developer. SysAdmin and DevOps. Comments are my own.

 California, USA
Joined January 2010
  • Tweets284
  • Following234
  • Followers113
3Media
Photo by Greg Tassone (@fcgreg)Photo by Greg Tassone (@fcgreg)Photo by Greg Tassone (@fcgreg)
1/ EZ Tools 2026.10 is out, all on .NET 10 (LTS) ✅ More accurate: 331K more event log records, hive logs replayed as Windows does, every test hive loads ⚡ Faster: up to 9x; EvtxECmd and Registry 2x 📉 Less memory: up to 82% less Update with Get-ZimmermanTools 🧵 #DFIR
Image from Eric Zimmerman (@EricRZimmerman)
5
99
7
305
13,437
Greg Tassone retweeted
Simson Garfinkel (@xchatty) profile picture
Simson Garfinkel
@xchattyAug 18
bulk_extractor 2.2.0 is out: a security and reliability release fixing CVE-2026-24857, with a standalone 64-bit Windows build, Windows raw-device input, runtime scanner plug-ins, improved Wi-Fi PCAP handling, and more. github.com/simsong/bulk_extr… #DFIR #DigitalForensics
Release BE v2.2.0 · simsong/bulk_extractor

Release BE v2.2.0 · simsong/bulk_extractor

What's Changed Update continuous-integration-pip.yml by @simsong in #479 Update identify_filenames.py by @h-ssh in #482 Update LICENSE.md by @simsong in #478 add missing include by @rick-gnous...

github.com
1
5
6
363
Greg Tassone retweeted
Arsenal Recon (@ArsenalRecon) profile picture
Arsenal Recon@ArsenalReconMay 27
We just released Hibernation Recon v1.2.3.96 with some awesome updates - Windows 24H2 & 25H2 support, new decompression algorithms, now runs on Windows on Arm & Linux, etc. How do you analyze Windows hibernation? ArsenalRecon.com #DFIR
Image from Arsenal Recon (@ArsenalRecon)
4
5
403
Greg Tassone retweeted
Arsenal Recon (@ArsenalRecon) profile picture
Arsenal Recon@ArsenalReconApr 22
Here’s something you don’t see every day in #DFIR - launching a virtual machine from a Linux laptop (safely booted with WinFE) connected to Arsenal Image Mounter across a network via AIM Remote Agent! ArsenalRecon.com
2
1
6
1,814
Greg Tassone retweeted
Levi Nunnink 🦬 (@LeviNunnink) profile picture
Levi Nunnink 🦬@LeviNunninkMar 3
Little something I built. Link below
1
2
1
5
381
Greg Tassone retweeted
derek eiri 👻 (@MrEerie) profile picture
derek eiri 👻@MrEerieFeb 27
Exploring @thelazza’s new release of Fuji for Mac acquisitions sparked a fun take on making a “Fuji Cartridge” necessary for it to replicate to RAM-disk in recovery mode. fujiapp.top
Image from derek eiri 👻 (@MrEerie)
Image from derek eiri 👻 (@MrEerie)
Image from derek eiri 👻 (@MrEerie)
Image from derek eiri 👻 (@MrEerie)
4
7
602
Greg Tassone retweeted
System76 (@system76) profile picture
System76
@system7611 Dec 2025
Today marks the release of our new desktop environment, @COSMIC_desktop , alongside Pop!_OS 24.04 LTS—allowing us to provide our users what they want and to innovate further. There’s a ton of new customization and productivity features to explore!
Pop!_OS Official (@pop_os_official) profile picturePop!_OS Official
@pop_os_official11 Dec 2025
Pop!_OS 24.04 was released earlier today alongside a letter from @carlrichell on the @system76 blog. Thanks for your patience as we built something incredible for you!
27
77
8
723
27,977
Greg Tassone retweeted
Kagi (@KagiHQ) profile picture
Kagi
@KagiHQ7 Dec 2025
Kagi News features a "Today in History" section that brings you fascinating moments from the past, right alongside your daily news briefing. New to Kagi News? blog.kagi.com/kagi-news
Image from Kagi (@KagiHQ)
1
4
41
2,468
Greg Tassone retweeted
Proton (@ProtonPrivacy) profile picture
Proton
@ProtonPrivacy4 Dec 2025
Proton Sheets. You asked for it. Now it's here. (Details in 🧵)
96
134
15
1,705
77,275
Have you seen computers booted with @SUMURIForensics PALADIN launched into virtual machines over a network? vimeo.com/1138949857. ArsenalRecon.com #DFIR
Arsenal Image Mounter v3.12.331 - Launching VM from Dell Laptop...

Arsenal Image Mounter v3.12.331 - Launching VM from Dell Laptop...

Demonstrating Arsenal Image Mounter connected to a PALADIN-booted laptop across a network via AIM Remote Agent, then launching a virtual machine from the remotely-connected disk.

vimeo.com
1
3
8
1,163
dontMakeMeThink redd.it/1nyv0lw
Image from Programmer Humor (@PR0GRAMMERHUM0R)
54
783
59
7,147
277,564
Greg Tassone retweeted
Kagi (@KagiHQ) profile picture
Kagi
@KagiHQ30 Sep 2025
Today, we’re officially introducing Kagi News: a once-a-day press review that cuts through the noise. Global stories, community-curated sources, and zero tracking. News the way it should be. Links below 👇
12
21
3
110
9,927
Have you saved your spot for Techno Security West 2025 yet? 📍 San Diego, CA | 📅 October 27–29, 2025 🔗 Register now: technosecurity.us/west/regis… #TechnoSecurity #SanDiego #TechnoWest2025
Image from Techno Security (@technosecurity)
1
1
56
Good news, iLEAPP v2.3.0 release is out, go grab it now! New features : - Support of iTunes encrypted backups - New Unified Logs artifacts - Progress / status count to console output Parser Updates: - Improve media file lookup speed (~20x faster) - New modules : Sysdiagnose, AMDSQLiteDB, Airbnb messages, Potato Chat Parser, CashApp, User defaults - Modules updated for LAVA output github.com/abrignoni/iLEAPP/…
Release v2.3.0 · abrignoni/iLEAPP

Release v2.3.0 · abrignoni/iLEAPP

iLEAPP v2.3.0 New features : Support of iTunes encrypted backups New Unified Logs artifacts Progress / status count to console output Improve media file lookup speed (~20x faster) New modules :...

github.com
4
6
623
Lazy* police work results in arresting an innocent person.

4
11
1,628
🌴 San Diego this October ➡️ Techno Security West 2025! What’s your favorite part of Techno Security conferences: networking, training, or the expo hall? 👀 #TechnoSecurity #DigitalForensics #CyberSecurity #SanDiego #TechnoWest2025
Image from Techno Security (@technosecurity)
Image from Techno Security (@technosecurity)
Image from Techno Security (@technosecurity)
1
2
83
Save this DFIR mini series: Jump Lists 2025 ⤵ → What Is a Jump List: cybertriage.com/blog/what-is… → Jump List Forensics: cybertriage.com/blog/jump-li… → Jump Lists Cache: cybertriage.com/blog/what-is… P.S. Share this post to help other DFIR pros!
What Is a Jump List?

What Is a Jump List?

What is a jump list? The answer depends on who you are. For general users, they're a way to access recently used files. For investigators, they're a means

cybertriage.com
8
29
1,146
Greg Tassone retweeted
FFmpeg (@FFmpeg) profile picture
FFmpeg
@FFmpeg22 Aug 2025
🚨 FFmpeg 8.0 has been released! 🚨 It has many new features and bugfixes such as APV and ProRes RAW decoding, numerous Vulkan encoders and decoders, VVC decoding features etc. We have also upgraded our project infrastructure. ffmpeg.org/
112
406
33
6,066
471,009
Greg Tassone retweeted
DHH (@dhh) profile picture
DHH
@dhh13 Aug 2025
If you bought an Intel Mac Mini in 2023, it'll stop receiving updates from Apple next year. Not even Android has that short of a support window any more! But I bet you can still install Linux on it to extend its life. uk.pcmag.com/macos/158506/ap…
Apple Confirms End of Support for Intel Macs After macOS Tahoe

Apple Confirms End of Support for Intel Macs After macOS Tahoe

Apple's upcoming macOS Tahoe is only supported on four Intel Macs. Starting next year, macOS updates will only come to Apple Silicon Macs.

uk.pcmag.com
120
45
8
1,178
109,282
This is gonna be a great time and event!!!
SANS DFIR (@sansforensics) profile pictureSANS DFIR@sansforensics11 Aug 2025
🚨OPEN NOW! The @EricRZimmerman #EZToolChallenge at #DFIRCON is accepting submissions! Got a #DFIR tool idea? 🛠️ Submit it by 8/29. Eric will unveil the winner during his keynote! 👉 Submit: sans.org/u/1CrZ 🔎 DFIRCON: sans.org/u/1Cs4
Image from SANS DFIR (@sansforensics)
3
10
2,967
Load more