by Mark Spencer | Aug 25, 2020 | Digital Forensics
Are there dumb questions in digital forensics? Mark Spencer August 25, 2020 “There are naive questions, tedious questions, ill-phrased questions, questions put after inadequate self-criticism. But every question is a cry to understand the world. There is no...
by Mark Spencer | Aug 12, 2020 | Digital Forensics, Image Mounter Related
Quick Tour of New Features in Arsenal Image Mounter v3.2.128 Mark Spencer August 12, 2020 Arsenal Image Mounter’s Windows authentication bypass is already more powerful than any other tools we are aware of, but that has not stopped us from continuing to push...
by Mark Spencer | Jun 15, 2020 | Digital Forensics, Image Mounter Related
Quick Tour of New Features in Arsenal Image Mounter v3.2.126 Mark Spencer June 15, 2020 When the United States Army asked us if Arsenal Image Mounter’s Windows authentication bypass could be extended to handle domain accounts protected by smart cards, we were...
by Mark Spencer | May 6, 2020 | Digital Forensics
Free Arsenal Educational Subscriptions 0 Comments Mark Spencer May 6, 2020 Years ago (ok, many years ago) when I was an adjunct professor teaching digital forensics at Bunker Hill Community College in Boston, I very much appreciated both the free and...
by Mark Spencer | Apr 24, 2020 | Digital Forensics, Windows Hibernation
The Interesting Case of Windows Hibernation and BitLocker 0 Comments Mark Spencer April 24, 2020 Windows hibernation and BitLocker are two technologies that are quite interesting on their own, and some might say even more interesting (or, frustrating) when...
by Joakim Schicht | Apr 9, 2020 | Digital Forensics, Microsoft Office Document Cache
An Inside View of Office Document Cache Exploitation Joakim Schicht April 9, 2020 When we began our initial development of ODC Recon, we were aware that multiple versions of Microsoft Office documents could be extracted from FSD files found within Office...
