Research archive
Feb 22, 2025
Exploring how temporary credentials obtained through AWS Instance Metadata Service can be extracted and used both inside and outside EC2 instances, and analyzing their visibility in CloudTrail logs.
Read more →Feb 15, 2025
Does Windows 11 treat ShellBags differently?
Read more →Jan 31, 2025
Write-ahead log analysis
Read more →Jan 26, 2025
Parsing the sector 0
Read more →Jan 16, 2025
Unveiling forensic insights and pitfalls of SRUM data
Read more →Sep 09, 2021
In these series of posts I will be talking about feature pack updates for Windows 10 operating system and how they affect computer forensic examinations. First part covers USB forensic artifacts affected by the update.
Read more →