All topics

The best Digital Forensics newsletters

7 newsletters, ranked by editorial quality and how recently they published. Looking for something more specific? Search instead.

nullsec.us· irregular· Published 6 months ago

A practitioner's blog-style newsletter on digital forensics and incident response, covering a Linux privilege escalation CVE and benchmarking of the Plaso timeline tool on Windows versus WSL. Readers get hands-on technical detail, reproducible tooling links and candid corrections of the author's own findings.

dfirplasolog2timelinewslcve-2026-31431copy fail
thelarsdaniel.com· irregular· Published 2 months ago

Digital forensics expert Lars Daniel writes about AI evidence, deepfakes and phone forensics, using current court cases and interviews with field practitioners. The issues in this sample are pointed, well-sourced commentary on how AI misuse by experts can distort courtroom evidence.

expert witnessai evidencedeepfakescell phone forensicsdigital forensicschatgpt in court
mrsosint.com· irregular· Published 2 days ago

A bilingual OSINT project offering scenario-based challenges and structured analytical method guides for passive open-source research. Its excerpts cover building and aging personas for observation, plus an introduction to what OSINT is and how it differs from hacking.

osintopen source intelligencedigital investigationsock puppetspersona buildingvirtual machine
packetpassport.com· irregular· Published 5 months ago

A solo infrastructure practitioner writes about protecting business records with cryptographic and server-side logs rather than trusting screen text, and about layered Linux and cloud defenses using UFW, Fail2Ban and ModSecurity. Issues also include reflective posts on learning by doing.

ufwfail2banmodsecurityowasp core rule setemail forgeryserver logs
mickaelwalter.fr· irregular· Published 10 months ago

Mickaël Walter's blog mixes personal entrepreneurship updates with hands-on infosec and technical deep dives, such as parsing the VMDK disk format for forensics and walkthroughs of the OpenCTI threat intelligence platform. Readers get practical, tool-specific explanations from someone with incident response experience.

openctivmdk formatcyber threat intelligencevulnerability intelligencedigital forensicsexhume toolkit

1234n6

Ghost
blog.1234n6.com· irregular· Inactive for over a year

A blog by a digital forensics practitioner covering Windows forensic artifacts, OS version mapping, and conference CTF writeups. Readers get technical notes on evidence of execution sources and practical references for DFIR work.

windows forensicsevidence of executionprogram compatibility assistanteventtranscript.dbwindows server 2025windows 11 artifacts
digitalforensics.io· irregular· Published 1 months ago

A personal blog by a digital forensics practitioner sharing hands-on notes on DFIR topics such as metadata history, QEMU-based network tunneling, and setting up Linux forensic virtual machines. It mixes tutorial walkthroughs with links to outside research, offering practical setup detail alongside background explanation.

dfirmetadataqemunetwork tunnelingtsurugi linuxvirtualbox