
Memory Forensics with Volatility 3 - A Practical First Walkthrough
Memory forensics with Volatility 3 - capture, profile selection, pslist, malfind, netscan, hivelist, and a 30-minute first-investigation walkthrough.
Posts

Memory forensics with Volatility 3 - capture, profile selection, pslist, malfind, netscan, hivelist, and a 30-minute first-investigation walkthrough.

EXIF metadata for forensic examiners - GPS coordinates, camera serial, software signature, real-case examples, and how attackers strip it.

CVE-2026-41089 Windows Netlogon RCE exploited in the wild. Oracle WebLogic CVE-2024-21182 active. Red Hat npm supply chain attack hits 32 packages.

CVE-2026-0257 PAN-OS auth bypass exploited 4 days post-disclosure. Microsoft MFA outage blocks enrollments. 19-year Linux kernel root flaw goes public.

Windows event log forensics decoded - 4624, 4625, 4672, 4688, 4634, 7045, 1102 and how to read them in an investigation.

Chain of custody in digital forensics - what to document, the seven failure modes that get evidence thrown out, and the form fields a court actually requires.

Cisco AI Defense secures the AI lifecycle - discovery, validation, runtime protection, supply chain, and shadow-AI control. A solutions engineer's deep …

Forensic disk imaging compared - dd, FTK Imager, and Autopsy. When to use each, write-blocker requirements, hash verification, and court-admissible output.

Complete Cisco ISE BYOD onboarding guide - dual-SSID flow, internal CA, native supplicant provisioning, MyDevices portal, and lifecycle management.

CVE-2026-0263 and CVE-2026-0264 deliver RCE in PAN-OS VPN and DNS processing. FortiClient EMS CVE-2026-35616 exploited in the wild.