A blog by a digital forensics practitioner covering Windows forensic artifacts, OS version mapping, and conference CTF writeups. Readers get technical notes on evidence of execution sources and practical references for DFIR work.
Website: https://blog.1234n6.com/
A practitioner's blog-style newsletter on digital forensics and incident response, covering a Linux privilege escalation CVE and benchmarking of the Plaso timeline tool on Windows versus WSL. Readers get hands-on technical detail, reproducible tooling links and candid corrections of the author's own findings.
Digital forensics expert Lars Daniel writes about AI evidence, deepfakes and phone forensics, using current court cases and interviews with field practitioners. The issues in this sample are pointed, well-sourced commentary on how AI misuse by experts can distort courtroom evidence.
A bilingual OSINT project offering scenario-based challenges and structured analytical method guides for passive open-source research. Its excerpts cover building and aging personas for observation, plus an introduction to what OSINT is and how it differs from hacking.
Mickaël Walter's blog mixes personal entrepreneurship updates with hands-on infosec and technical deep dives, such as parsing the VMDK disk format for forensics and walkthroughs of the OpenCTI threat intelligence platform. Readers get practical, tool-specific explanations from someone with incident response experience.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
