This week I go over my survival tips for imaging solid state drives (SSDs).

This week I talk about threat intelligence tool Hostintel by Keith Jones.

This week I share some thoughts on how to approach DFIR conferences to maximize the experience. There are many to choose from and having an analytical approach may get you exactly what you want for your time and money.

This week I talk about my favorite Volatility plugins for File Use & Knowledge investigations to get at the volatile evidence most often targeted during a dead box exam.

This week I talk about FreeMind, a freely available visualization tool that can be used to enhance the computer forensic investigation process.

This week I talk about an openly available library and tool repository  all examiners should be aware of as well as a tool by Didier Stevens called "AnalyzePESig" which is perfect for bulk analysis of executables on Windows systems.

This week I talk File Use & Knowledge investigations involving virtual machines. This is mainly from a dead-box exam point-of-view.

This week I talk about SRUM, a windows artifact with some significant forensic value for both File Use & Knowledge investigations as well as Incident Response.

This week I talk about considerations for digital evidence integrity when collection evidence on-scene from a live system.

This week I talk about surviving mobile App timestamps.