Publicly-Accessible Disk Images & Mobile Extractions Grid for DFIR

September 25th, 2024
By:  Emina Doherty,  Anastasia Shek

A question asked in our office, and maybe in yours - “Does anyone know which publicly-accessible disk images contain (insert your artifact of interest)?”

Read More
Published:
September 25th, 2024
 |  Topic(s):  NewsTraining

An Adventure in Cached Windows Domain Password Recovery

July 11th, 2018
Read More

Case Study in Successful Dash Cam Video Repair

June 16th, 2018
I was alerted to someone looking for help to repair a damaged video from a dash cam, video which may have captured a horrible accident.
Read More

Quick Look Cache Parsing

June 4th, 2018
Read More

Integrating Arsenal Image Mounter Source Code and APIs

February 21st, 2018
Read More

Unique Windows Registry data in Fast Boot hibernation and hive transaction logs

February 17th, 2018
Read More

Windows Hibernation Infographic

February 6th, 2018
Read More

Join the List

Arm yourself with updates about Arsenal tools, training, and research. Our mailing list is double opt-in so you will need to check your email and confirm your subscription before receiving our mailings.