DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response.

Joined January 2019
Photos and videos
📢 Another New #DFIR Peer-Reviewed Article is live on @DFIRReview "Word Documents – What Changed?” by Ross Donnelly examines how RSIDs within DOCX files can reveal editing sessions and modified content. #DigitalForensics #DFIR dfir.pubpub.org/pub/mdm3270g…
1
1
113
A New #DFIR Peer-reviewed article has been published on @DFIRReview by "Is that Windows Notepad window really empty?" by Christopher Eng. #WindowsForensics #DigitalForensics dfir.pubpub.org/pub/wmhy8t6v…
3
10
732
Go checkout another #DFIR Peer-Reviewed article published earlier this year on @DFIRReview "How Did That Photo Get On That iPhone" by Steve Bunting focusing on the source of photos artifacts in Photos.sqlite database. dfir.pubpub.org/pub/5d08cdxl…
2
6
327
A great new #DFIR Peer-Reviewed article is live and published on @DFIRReview “Location, Location, Location” by @BlakDouble It's an amazing article which gives in depth insights into location artifacts. dfir.pubpub.org/pub/4fkeiv34…

3
12
673
One more #DFIR Peer-reviewed article is live and published on @DFIRReview "Enriching Investigations with Apple Watch Data Through the healthdb_secure.sqlite Database" by @SQL_McGee dfir.pubpub.org/pub/xqvcn3hj…
7
9
1,391
Another #DFIR Peer-reviewed article has been published on @DFIRReview by @SQL_McGee "Alternate Location for Deleted SMS/iMessage Data in Apple Devices" dfir.pubpub.org/pub/yp6efc8q…
7
11
Checkout out the “IOS KnowledgeC.db Notifications” #DFIR Peer reviewed article by @Scott_Kjr published on @DFIRReview dfir.pubpub.org/pub/g2v1z97i…
6
9
A New #DFIR Peer-reviewed article has been published on @DFIRReview by @josh_hickman1 "Wipeout! Detecting Android Factory Resets" dfir.pubpub.org/pub/xmjxofpd…
11
13
We have another #DFIR Peer-reviewed article live and published on @DFIRReview "Turbo Speed: Parsing Device Health Services from Google" by @KevinPagano3 dfir.pubpub.org/pub/4can3p40…
11
18
New #DFIR Peer-Reviewed article has been published and live on @DFIRReview by @Scott_Kjr and @BlakDouble “iOS Location Services and System Services are they ON or OFF” dfir.pubpub.org/pub/4sv4kxyh…
9
7
Check out the @DFIRReview showcase featuring @Scott_Kjr’s presentation on "iOS Settings Display Auto Lock and Require Passcode" at @DFRWS USA 2022 next week. dfrws.org/conferences/dfrws-…

3
4
Another #DFIR Peer-reviewed article is live and published on @DFIRReview "iOS Settings Display Auto-Lock & Require Passcode" by @Scott_Kjr dfir.pubpub.org/pub/khnqi0ff…
6
13
Another #DFIR Peer-reviewed article is live and published on @DFIRReview "Ain’t That a Kik in the Head: Kik Messenger iOS Analysis" by @KevinPagano3 and @AlexisBrignoni dfir.pubpub.org/pub/z29xp2bu…
12
24
Checkout out our @DFIRReview 2021 statistics and great things achieved at @DFRWS blogpost #DFIR dfrws.org/dfir-review-year-i…

3
5
Congratulations! to all our reviewers who have given their time to review a multitude of papers for @DFIRReview! Check out our Gold and Silver Reviewers #DFIR dfir.pubpub.org/community
6
7
A New Peer-reviewed article has been published on @DFIRReview by Larry Jones "Validation of X-Ways Forensics Evidence File Containers" #DFIR dfir.pubpub.org/pub/30nk59ar…
3
2
New #DFIR Peer-Reviewed article has been published and live on @DFIRReview “Missing SQLite Records Analysis” by @blakdouble and @qubytelogic dfir.pubpub.org/pub/33vkc2ul…
8
8
#Congratulations to @HeatherMahalik and @mattforensic, winner of @4cast 2021 article of the year. #DFIR Peer reviewed article. "How to Use iOS Bluetooth Connections to Solve Crimes Faster" dfir.pubpub.org/pub/frknihlg…
6
14
Congratulations to the two papers peer-reviewed on @DFIRReview that were nominated for @4cast 2021 awards from @HeatherMahalik , @mattforensic and @theAtropos4n6 The voting portion of the @4cast awards 2021 can be found here forensic4cast.com/forensic-4…

2
10
Another #DFIR Peer-reviewed article is live and published on @DFIRReview "USB Forensics – Recover more Volume Serial Numbers (VSNs) with the Windows 10 Partition/Diagnostic Event Log" by @theAtropos4n6 dfir.pubpub.org/pub/h78di10n…
9
22