The official DFIR Training account and most complete #DFIR online resource. Managed by @Brett_Shavers.
Joined August 2016
- Tweets15.6K
- Following412
- Followers17.6K
- Likes13.1K
DFIR Training retweeted
Today only. Live online. No replay.
I'm taking you inside my investigative thinking process.
5:30PM ET. 3:30PM MT. 2:30PM PT.
us02web.zoom.us/webinar/regi… #DFIR
🤖 Made with AI
DFIR Training retweeted
1,212 registered. And still climbing.
Tomorrow, I'm walking through a LIVE investigation using actual public records, investigative reports, emails, and evidence.
I'll show my investigative decisions, the mistakes to avoid, the unanswered questions, and when to stop digging or keep digging.
Free. October 28. suspectbehindthekeyboard.com…
DFIR Training retweeted
On October 28, join us for our next #MobileUnpacked where @cScottVance will explore how health data is protected across iOS and Android and what investigators may be able to uncover through different levels of mobile extraction.
🔗 Register here: ow.ly/PJjo5100HxA #DFIR
Oct 27. Flying #DFIR.
linkedin.com/feed/update/urn…
DFIR Training retweeted
Week 43 - 2026 #DFIR
thisweekin4n6.com/2026/10/25…
DFIR Training retweeted
Know where the evidence lives.
This FOR585 poster maps iOS and Android artifacts, retention, acquisition paths, SQLite queries, and free tools for investigating app data, device activity, and mobile malware.
👉 go.sans.org/TZlo1i
#MobileForensics #DFIR
DFIR Training retweeted
Patched PHP2Shell? Now investigate what’s already there.
Jeff Hamm, Binalyze's Forward Deployed Security Architect, on hunting for webshells and persistence left before the patch, with companion Sigma and YARA rules to get you started: binalyze.ai/blog/investigati…
Finding an artifact isn't the same as investigating a case.
Join Brett Shavers for a FREE live session examining how he develops questions, tests hypotheses, evaluates evidence, and makes investigative decisions in a real, ongoing case.
Oct 28 | 3:30 PM MT
suspectbehindthekeyboard.com…
DFIR Training retweeted
Generic chatbots guess. In forensics, guessing destroys cases.
BelkaGPT is purpose-built for DFIR: 100% offline, directly cites source artifacts, and admits when evidence isn't found instead of hallucinating answers.
Watch the breakdown: eu1.hubs.ly/H0zkbDC0
Finding an artifact isn't the same as investigating a case.
Join Brett Shavers for a FREE live session examining how he develops questions, tests hypotheses, evaluates evidence, and makes investigative decisions in a real, ongoing case.
Oct 28 | 3:30 PM MT
suspectbehindthekeyboard.com…
DFIR Training retweeted
Looking for an Oxygen Forensics alternative?
Switch to Belkasoft X without leaving your existing work behind. Match your renewal price, open .ofb images with zero downtime, add computer forensics & offline AI, and order through your existing reseller:
eu1.hubs.ly/H0zh35y0
DFIR Training retweeted
In this new eBook, "No surprises on the stand", you'll get a practical framework to help prosecutors and digital device examiners prepare together, identify issues early and walk into court better prepared.
Download the eBook: magnetforensics.com/resource…
DFIR Training retweeted
Blogs aren't long when the content is relevant, and in this case, super-revelant.
DFIR OGs who vent unfiltered, frustrated ramblings are my favorite sources of learning how to get sh*t done without needing to get another degree.
A blog about our AI panel at the #DFIRSummit is here. smarterforensics.com/2026/10… These are my takeaways. It’s long, grab a drink and read it. Ignore typos… I finally just decided enough was enough. Links included for resources. Thanks @JennElston for the help!
DFIR Training retweeted
Belkasoft X v2.12 improves Android agent-based acquisition for modern Android releases. Run the agent via USB flash drives for on-site acquisitions, collect SMS and call logs, and save extracted evidence directly to custom folders.
Explore the highlights: eu1.hubs.ly/H0zf0_n0
DFIR Training retweeted
Why hasn't automated triage fixed alert fatigue?
Our 2026 research found that 67% of CISOs using AI for triage still can't completely trust it. 71% believe AI should be powerful for triage but isn't being used correctly.
Read the report: binalyze.ai/2026-state-of-so…
DFIR Training retweeted
Join us Oct 21 for a special replay of our #AskMeAnything session: Accelerating #IncidentResponse with digital forensics at scale. Learn how #DigitalForensics can help determine root cause, uncover the full scope of an incident, and preserve evidence: ow.ly/ILsc50ZYUJK
DFIR Training retweeted
Containing a data breach is only the beginning. The bigger question is: What actually happened?
Learn how a forensic-first approach can help organizations scope breaches, guide remediation, and make evidence-backed decisions with confidence: ow.ly/3IQZ50ZZ31U
#DFIR
DFIR Training retweeted
🚨 300 potential threats ignored every day.
Our 2026 State of the SOC Report is featured in Interface Magazine, highlighting why overwhelmed SOCs need more than alerts.
They need investigative clarity.
Read the coverage 👇
interface.media/blog/2026/10…
