Forensics StartMe Updates (3/1/2025)

QR Code:

If people have suggestions for additions please feel free to shoot me a message on the app formerly known as X/Twitter (@KevinPagano3) or Bluesky. I added a Buy Me A Coffee link for anyone that feels so inclined to support the page with a donation.

Blog Feed

0x55aa - Ilya Kobzar

Bit By Bit Forensics

Liebensraum

Forensic Tools

Logon Session Auditor - parses Windows EVTX logs to extract login and logout sessions from a security.evtx file

Memory / RAM Tools

AVML - Acquire Volatile Memory for Linux

Other Utilities

Freezing Internet Tool - FIT is a Python3 application for forensic acquisition of contents like web pages, emails, social media, etc. directly from the internet

Test Device & Analysis Setup

Tool Fetcher - A tool for fetching DFIR and other GitHub tools