My First Day at Ankura: A New Chapter Begins
Today marks the beginning of an exciting new chapter in my professional journey as I join Ankura as Cybersecurity Incident response,...
top of page
-
May 191 min read
Blog Post: Ensuring System Security Post-Attack – Comprehensive Remediation Steps
In today's digital landscape, cyberattacks are an ever-present threat. It's essential to have a robust remediation plan to ensure...
47 views0 comments
-
May 182 min read
Theoretical Important notes for Memory Acquisition and Disk Encryption
Introduction: In the world of digital forensics, thorough memory acquisition and disk encryption detection are essential steps in...
14 views0 comments
-
May 161 min read
Unveiling Threats: Exploring Active Directory Replication from Non Machine Account + Mimikatz DC Sync.”
Today, I'm excited to share a fascinating blog post written by one of my dearest friends, Jaye V from ConnectWise. In this insightful...
30 views0 comments
-
May 151 min read
Saying Goodbye: Reflecting on My Journey with ConnectWise
As I sit down to write this blog post, my heart is filled with a mix of emotions. Today marks the end of an incredible chapter in my life...
8 views0 comments
-
May 142 min read
Mobile Email and SMS/MMS Forensics: A Critical Component of Digital Investigations
Mobile devices have become an indispensable part of our daily lives, and as such, they often contain valuable evidence that can be...
30 views0 comments
-
May 132 min read
Navigating the Complexities of Webmail Forensics: Challenges and Solutions
Webmail has become an integral part of our digital lives, but it presents unique challenges for forensic investigators. Unlike...
31 views0 comments
-
May 112 min read
Unleashing the Power of Content Search in Office 365 for Email Investigations
In today's digital landscape, the ability to swiftly and effectively search across vast amounts of data is paramount for organizations....
33 views0 comments
-
May 92 min read
Leveraging Compliance Search in Microsoft Exchange for Email Investigations
Microsoft Exchange has consistently evolved, incorporating new features to enhance email management, searching, archiving, and...
30 views0 comments
-
May 82 min read
Email Data Extraction from Exchange Servers
With the release of Exchange 2010 and its subsequent Service Packs, PowerShell-based command-line tools have become the preferred method...
29 views0 comments
-
May 62 min read
Collecting Email Evidence from Network-Based Servers
Collecting email evidence from mail servers can indeed be challenging due to various factors like server location, criticality to...
22 views0 comments
-
May 52 min read
The "Recoverable Items" Folder in Microsoft Exchange
The evolution of the Recoverable Items folder in Exchange 2010 showcases Microsoft's commitment to enhancing legal compliance, data...
37 views0 comments
-
May 22 min read
Email Storage: Server vs. Workstation
Determining the location of email data—whether on a server or a workstation—is a pivotal first step for forensic investigators. Email...
30 views0 comments
-
May 12 min read
Demystifying Email Encryption and Forensic Analysis
Email remains a primary communication tool, handling a vast amount of sensitive information daily. As such, understanding email...
25 views0 comments
-
Apr 302 min read
Navigating the Email Clients, Features of Modern Email Clients, Corrupted Email Archives
What is Email client? An email client, often simply referred to as an "email program" or "email software," is a computer program or...
32 views0 comments
-
Apr 291 min read
Outlook Attachment Recovery
Key Points: Temporary Storage: When attachments are previewed or opened in Outlook, they are saved temporarily in this folder on the...
30 views0 comments
-
Apr 282 min read
Exploring PST and OST File Viewers for Forensic Analysis
The release of Microsoft's specifications for the Outlook Personal Folders (.PST) file format in 2010 was a watershed moment for digital...
166 views0 comments
-
Apr 273 min read
Understanding Host-Based Email in Digital Forensics
Host-based email stores are local email archives stored on a computer, distinct from server-based email archives. These archives often...
28 views0 comments
-
Apr 262 min read
Detailed explanation of SPF, DKIM, DMARC
Sender Policy Framework (SPF) Purpose: Authentication: SPF serves as a validation mechanism, allowing organizations to specify which mail...
29 views0 comments
-
Apr 252 min read
Deep Dive into Additional Email Header Fields in Digital Forensics
In our previous exploration of email headers, we delved into some of the most common and widely recognized fields like Message-ID and...
30 views0 comments
bottom of page