Publicly-Accessible Disk Images Grid for DFIR

March 21st, 2024
By:  Emina Doherty,  Anastasia Shek

A question asked in our office, and maybe in yours - “Does anyone know which publicly-accessible disk images contain (insert your artifact of interest)?”

Read More
March 21st, 2024
 |  Topic(s):  NewsTraining

BitLocker for DFIR – Part II

October 30th, 2019
Launching virtual machines from BitLockered disk images using Arsenal Image Mounter
Read More

The Office Document Cache and Introducing ODC Recon – Part I

October 25th, 2019
Microsoft’s “Office Document Cache” is complex, infuriating, and misunderstood. Arsenal has now drastically improved the situation for our colleagues in digital forensics.
Read More

Digging Deeper into Gmail URLs & Introducing Gmail URL Decoder

July 29th, 2019
Read More

New Versions of HiveRecon and HbinRecon Launched

October 10th, 2018
Read More

Sponsoring Arsenal Image Mounter

September 24th, 2018
Read More

Digging into Gmail URLs

August 22nd, 2018
Read More

HiveRecon and HbinRecon Launched

August 9th, 2018
How does exposing Windows Registry data you’ve never seen before sound to you? We launched two new tools with powerful and unique functionality.
Read More

An Adventure in Cached Windows Domain Password Recovery

July 11th, 2018
Read More

Case Study in Successful Dash Cam Video Repair

June 16th, 2018
I was alerted to someone looking for help to repair a damaged video from a dash cam, video which may have captured a horrible accident.
Read More

Join the List

Arm yourself with updates about Arsenal tools, training, and research. Our mailing list is double opt-in so you will need to check your email and confirm your subscription before receiving our mailings.