RRTX Blog

Wednesday, April 3, 2019

Opening files in MDViewer from the explorer context menu

Posted by rrtx at 4:57 PM No comments:
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

MDViewer 1.1 released #dfir #metadata

Posted by rrtx at 4:57 PM No comments:
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest

Lets use PowerShell to review DLL’s without certs

Posted by rrtx at 4:57 PM No comments:
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Newer Posts Older Posts Home
Subscribe to: Posts (Atom)
Follow @Dave873

Search This Blog

ShadowKit

  • Home
  • ShadowKit
  • Links
  • Legacy RRTX Blog

About Me

rrtx
View my complete profile

Blog Archive

  • ▼  2019 (7)
    • ►  July (1)
    • ►  June (1)
    • ▼  April (3)
      • Opening files in MDViewer from the explorer contex...
      • MDViewer 1.1 released #dfir #metadata
      • Lets use PowerShell to review DLL’s without certs
    • ►  January (2)
  • ►  2018 (4)
    • ►  December (1)
    • ►  September (2)
    • ►  August (1)
  • ►  2017 (10)
    • ►  November (1)
    • ►  October (2)
    • ►  August (2)
    • ►  June (2)
    • ►  May (2)
    • ►  February (1)
  • ►  2016 (7)
    • ►  December (1)
    • ►  July (1)
    • ►  June (1)
    • ►  May (1)
    • ►  April (1)
    • ►  March (2)
  • ►  2015 (13)
    • ►  December (1)
    • ►  November (1)
    • ►  September (1)
    • ►  August (2)
    • ►  July (1)
    • ►  June (3)
    • ►  May (2)
    • ►  March (1)
    • ►  February (1)
  • ►  2014 (7)
    • ►  March (3)
    • ►  February (3)
    • ►  January (1)
  • ►  2013 (6)
    • ►  December (2)
    • ►  November (2)
    • ►  May (2)
  • ►  2012 (13)
    • ►  September (3)
    • ►  August (2)
    • ►  July (1)
    • ►  June (2)
    • ►  May (2)
    • ►  April (3)

Popular Posts

  • Botched iTunes Match. A post Mortem on Fixing broken songs
    So I have been hearing about iTunes Match for a while and I decided to go with it to get my huge music collection upgraded and cleaned. H...
  • Scripting with FTK Filters - Updated
    This is an updated post about building Access Data’s FTK Toolkit filters outside of FTK. Access Data probably won’t like this since a ...
  • ShadowKit v1.6 has been released!
    ShadowKit 1.6 has been released. This release adds a new dialogue window when exporting files that gives you the options to choose if you wa...
  • Access Shadow Copies (VSS) Natively
    This is a first glance at accessing Shadow Copies (VSS) natively in Windows 7. Did you know that you can access Shadows from the Previous...
  • Introducing MetaDiver!
    I'm pleased to share a program I have been working on for the past few months. MetaDiver extracts metadata from known files such as Offi...
  • ShadowKit - Working with Disk Images
    ShadowKit – Working with Disk Images Guide v1 - Mounting an image. The easiest and best way to access Windows 7's Volume Shadow ...
  • Finding Shell Metadata
    Finding Shell Metadata In my last post I talked about Shell32 in Windows and gave some background on how it works. In this post I want to ...
  • Latest ShadowCopy Research - Part 2
    The latest Volume Shadow Copy Code Samples from Microsoft So i just posted Part 1 discussing diskshadow . Now I'm excited to discu...
  • New Forensic Image viewer under dev #dfir #infosec
    There is a new forensic viewer in town called “Pancake Viewer”. It’s being developed by our good friend Forensicmatt known for the Triforce ...
  • ShadowKit v1.2 Released!
    ShadowKit v1.2 has been released. This version includes bug fixes and a few minor user interface enhancements. Below is list of changes in t...
Simple theme. Powered by Blogger.