Autopsy release webinar happening today at 11 Eastern. See the new keyword search and malware scanning module in action! And ask Brian any questions.
attendee.gotowebinar.com/reg…
The Sleuth Kit 4.12.1 is out. Mostly bug fixes on the C side (from Luis Nassif and Joachim Metz) and some Java changes motivated by Autopsy & Cyber Triage.
github.com/sleuthkit/sleuthk…
The Sleuth Kit 4.12.0 is also out. Major new feature there is LVM support on Linux from @joachimmetz and limited logical folder support.
sleuthkit.org/sleuthkit/down…
Autopsy 4.20.0 is out after a 1-year delay!!! Learn about the new features (including a new pipeline and more Jython modules), why it's been quiet for a year, and what's in store for 2023.
autopsy.com/autopsy-4-20-0-i…
ResponderCon: Investigating Ransomware agenda is up and registration is open! Great submissions and we decided to add a 2nd track. 16 talks. 1 day. Very exciting! Sept 13.
Learn case studies, tools, artifacts, process, and more.
respondercon.io/agenda/
We have a new Director of Training position open for Cyber Triage and Autopsy. Come join us to build and teach incident response and forensics (#DFIR) courses in-person and online. You'll also get to impact new features.
cybertriage.com/about/career…
2 Days Left to submit a talk to the biggest (and only) DFIR-specific Ransomware Investigation event! Lots of great submissions already.
One gap is a talk from a victim their lessons. Topics on attack vectors, deployment mechanisms, etc. encouraged.
cyberrespondercon.com/call-f…
Autopsy 4.19.3 is out with Log4J fix (and Solr 8.11.0 upgrade).
This was a manual build and only the 64-bit version was made. The next major release will have more options and will have Solr 8.11.1.
autopsy.com/download/
Want some #OSDFCon glory without a full, technical talk? Submit a short video and we'll play it during the breaks.
Examples:
"You might be in DFIR if ____"
"I hate it when tools ___"
"I love it when tools ___"
Tips and tricks
Tik Tok Dances
Due Nov 28
osdfcon.org/2021-event/video…
2 weeks until #OSDFCon (Dec 1). It's time for you to register and put it on your calendar and for me to start working on Autopsy slides. Con is virtual and free.
osdfcon.org/
Swag this year has Hash as a super hero!
Autopsy 4.19.2 is out. Continued UI enhancements to the Analysis Result vs Data Artifact concept and several bug fixes.
github.com/sleuthkit/autopsy…
Also out is a corresponding TSK release with fixes from @joachimmetz, Joel Uckelman, and Kim Stone.
New post about Azure with Cyber Triage / Autopsy databases. TLDR: Similar to Google. Cheaper and Faster than AWS. ☁️ ☁️ ☁️
Post has a summary of all three providers if you are looking to put your #DFIR lab in the cloud.
cybertriage.com/2021/cyber-t…
We finished our Google Cloud testing and found it was faster and cheaper than AWS for PostgreSQL. ☁️💰☁️💰
Results apply to both Autopsy and Cyber Triage. Blog has GCP basics, results, and CT setup.
cybertriage.com/2021/cyber-t…@googlecloud
Our first cloud database post is up about @awscloud. We get a lot of requests about how to run Cyber Triage and Autopsy in the cloud, so we did some experiments with CT.
Learn about your #DFIR database options and our test results.
cybertriage.com/2021/cyber-t…
After a crazy long delay, the #OSDFCon agenda is out!
There's talks on live DFIR, event logs, Autopsy updates, memory, EDR, and much more! We moved to Dec 1 and it's entirely virtual.
Agenda: osdfcon.org/2021-event/2021-…
Register for free:
osdfcon.org/2021-event/2021-…
One week left for the 2021 Autopsy Module competition!
💰 Cash Prizes. 💰
Python or Java. Make modules to flag various files or extract out artifacts!
osdfcon.org/2021-event/2021-…
Cyber Triage is pushing code back into Autopsy!
New blog post is up on the re-unification that will happen in a couple of weeks when CT 3 is released.
cybertriage.com/2021/cyber-t…
Autopsy point release is out to fix a database connection leak and an OS Account viewer prioritization bug. You can get 4.19.1 from autopsy.com/download