Cheeky4n6Monkey - Learning About Digital Forensics: So What Next?

Cheeky4n6Monkey - Learning About Digital Forensics

The (Badly) Illustrated Musings of a Cheeky Forensics Monkey ...

Saturday, 12 November 2011

So What Next?

So, what next? I'm kinda out of ideas for now ...
Any suggestions related to computer forensics and/or themes for future monkey mayhem are welcome at this time.

Posted by Cheeky4n6Monkey at 16:19

Email This BlogThis!Share to X Share to Facebook Share to Pinterest

Newer Post Older Post Home

Search This Blog

About Me

Cheeky4n6Monkey: Cheeky4n6Monkey loves learning about all things digitally forensical. He also enjoys creating new scripts that can help the forensics community. If you're contacting via email, please use a relevant subject line and introduce yourself (name or pseudonym) in the first line - otherwise you could be spam filtered! I can be contacted at: cheeky4n6monkey(a/t)gmail(d0t)com or (less reliably) on Twitter: @Cheeky4n6Monkey

View my complete profile

Source Code

Selected Scripts are available from GitHub here:
https://github.com/cheeky4n6monkey/4n6-scripts

Some Other Forensic Blogs

Krebs on Security

An Interview With the Target & Home Depot Hacker - In December 2023, KrebsOnSecurity revealed the real-life identity of Rescator, the nickname used by a Russian cybercriminal who sold more than 100 million ...
9 hours ago
Elcomsoft Blog

Intelligent Load Balancing: Optimizing Password Recovery Across Heterogeneous Units - In the latest update of Elcomsoft Distributed Password Recovery (EDPR), we’ve introduced a revamped load-balancing feature. The new feature aims to enhanc...
1 day ago
Phill Moore's Thisweekin4n6

Week 45 – 2024 - David Spreadborough at AmpedBehind the Screen: Codecs and Formats Unveiled David Haddad at Breakpoint ForensicsSamsung Secure Health Data Parser — A Forens...
5 days ago
Sarah Edwards' mac4n6.com

Sikkerhetsfestivalen 2024 - Lillehammer, Norway - I’ve uploaded my presentation that I gave at the lovely Sikkerhetsfestivalen 2024 in Lillehammer, Norway. This presentation goes through some pattern-of-...
5 weeks ago
Forensic Focus

Oxygen Remote Explorer Now Available - Oxygen Remote Explorer v.1.6 is now available. Capture remote disk dumps, extract WhatsApp data via Wi-Fi, and use new passcode brute force tools. The upda...
1 month ago
The Binary Hick's Blog

Triple Trouble. iOS 16, Android 14, and iOS 17 Images Now Available! - While it wasn’t as “soon” as I would have liked, I am (finally) pleased to announce the availability of public images of iOS 16, Android 14, and iOS 17. A ...
2 months ago
Zena Forensics

A first look at iOS 18 forensics - This has been a tough year for me: my mom passed away in June, and I'm still slowly recovering from the hard blow. It's time to start again doing what I ...
2 months ago
Hacking Exposed Computer Forensics Blog

AWS Cloud Trail Downloader V2! - Hello Reader, Time to dust the cobwebs off the blog! It's been a busy two years since I've joined Charles River Associates and I have so much to...
2 months ago
Heather Mahalik's Smarter Forensics

iOS 17- The “Forever” Setting That Isn’t… Or Is It? - When I teach SANS FOR585 Smartphone Forensic Analysis In-Depth, we really dive into iOS artifacts to validate the truth of what happened, what tools are re...
3 months ago
Yogesh Khatri's forensic blog

NSKeyedArchive Deserializer update - A long time ago I wrote some code to make NSKeyedArchives (NSKA) human readable, basically de-serializing the data. It was then converted to a library fo...
3 months ago
Alexis Brignoni's Initialization Vectors Blog

Full File System extractions in Zip - MAC times - How do zip files generated by extraction tools used in digital forensics manage file timestamps? When one looks at the zip file specification it does not c...
5 months ago
Sketchymoose's Blog

I Made a Chrome Extension with ChatGPT... - Extension is available at the Chrome Store! 👀 So like many people out there-- I cook. I troll the internet for recipes. However, there are times I do no...
8 months ago
Ryan Benson's dfir.blog

Unfurl v2023.09 Released! - Unfurl v2023.09 adds parsing for JWTs, URLs with encoded DoH (DNS over HTTPS) requests, and more Mastodon servers.
1 year ago
TheHexNinja

Shhh we're still hunting Phishers Part 2 - Welcome back Phish hunters. So the first part of the blog series (is two a series?) we looked at different encoding schemes Phishers use in crafting thei...
3 years ago
Mike Williamson's Blog

Taking a gander at iOS apps on an M1 Mac - I wanted to share some initial research I did over the rainy long weekend. I recently got access to a MacBook Pro with the M1 chip and so naturally I wan...
3 years ago
SANS Digital Forensics and Incident Response Blog

Pivoting to help our Cyber Community stay strong in times of uncertainty - This blog provides information about programs, training and free skill building opportunities in cyber provided by SANS in 2020
4 years ago
Mari DeGrazia's Another Forensics Blog

Detecting Lateral Movement with WinSCP - RDP is a common way for an attacker to move laterally within an environment. Forensically, when an attacker uses RDP we can use artifacts such as shellbag...
4 years ago
Brian Moran's BriMor Labs Blog

Small Cedarpelta Update - Good morning readers and welcome back! This is going to be a very short blog post to inform everyone that a very minor update to the Cedarpelta version of...
5 years ago
John Lehr's Linux Sleuthing

Time Perspective - Telling time in forensic computing can be complicated. User interfaces hide the complexity, usually displaying time stamps in a human readable format, e.g....
7 years ago
Ian Whiffin's DoubleBlak Blog

-

Books I Found Useful

Android Forensics: Investigation, Analysis and Mobile Security for Google Android
Definitive Guide to SQLite
Digital Forensics with Open Source Tools
File System Forensic Analysis
iPhone and iOS Forensics
Linux Forensics
NMAP Network Scanning
Perl Cookbook
Practical Lock Picking: A Physical Penetration Tester's Training Guide
Practical Mobile Forensics
The Art Of Memory Forensics
The Hardware Hacker
Windows Forensic Analysis DVD Toolkit 2ed
Windows Forensic Analysis Toolkit 3ed
X-Ways Forensics Practitioner's Guide

Popular Posts

Facebook / Facebook Messenger Android App Parser Script

Poorly drawn parody of the Faceoff movie poster Not satisfied with how your forensic tools are currently presenting Facebook (v3.3 f...
A Timestamp Seeking Monkey Dives Into Android Gallery Imgcache

Are you sure?! Those waters look pretty turdy ... UPDATE 4AUG2016: Added video thumbnail imgcache findings and modified version of scri...
Creating a Perl script to retrieve Android SMS

This script/post was inspired by Mari DeGrazia after she had to manually parse hundreds of Android SMS messages. Without her prior resea...
Monkeying around with Windows Phone 8.0

Ah, the wonders of Windows Phone 8.0 ... Failing eyesight, Frustration and Squirrel chasing UPDATED 22OCT2015 - Updated last section wi...
Using Perl to View an SQLite Database

Warning: This is one of my longer rambles posts and there's not many pics either. According to the SQLite website , SQLite is an ...
Windows Phone 8.0 SMS, Call History and Contacts Scripts

Apparently, you can't trust any old monkey with your Windows Phone ... Following on from our previous Windows Phone post and afte...
Google-ei'd ?!

Hmmm ... I seem to be having some trouble focusing after this latest post Ever looked closely at a Google search URL and seen a weir...
Monkey takes a .heic

The hills are alive ... with the compression of H.265! With iOS 11 and macOS High Sierra (10.13), Apple has introduced a file contai...
(Monkey) Carvings of Unknown File Types with Scalpel / Foremost on SIFT

Thierry13 recently requested we look into file carving - specifically, how do we carve for a non-standard / unknown files. For the scalpel ...
Finding Geo

Monkey, just keep swimming through the WinPhone data ... ya clown! UPDATE 6OCT2015: Edited FindMyPhone and Multimedia sections + added...

Blog Archive

► 2022 (2)
- ► February (1)
- ► January (1)

► 2021 (1)
- ► March (1)

► 2020 (3)
- ► November (1)
- ► May (1)
- ► March (1)

► 2017 (3)
- ► October (1)
- ► August (1)
- ► January (1)

► 2016 (5)
- ► August (1)
- ► July (2)
- ► May (1)
- ► April (1)

► 2015 (10)
- ► December (1)
- ► October (1)
- ► July (2)
- ► June (4)
- ► April (1)
- ► February (1)

► 2014 (8)
- ► October (3)
- ► July (2)
- ► June (1)
- ► January (2)

► 2013 (7)
- ► December (1)
- ► September (1)
- ► August (1)
- ► July (2)
- ► February (1)
- ► January (1)

► 2012 (20)
- ► December (1)
- ► October (1)
- ► May (2)
- ► April (2)
- ► March (9)
- ► February (5)

▼ 2011 (14)
- ► December (3)
- ▼ November (11)

Total Pageviews

Disclaimer

The views expressed in this blog are just the personal ramblings of one particular tired (and probably hungry) forensics monkey.

Should this monkey have an employer and/or join a professional organisation, this blog will NOT represent their views or opinion.

Simple theme. Powered by Blogger.