We are digital forensics consultants and software developers well-known for stepping into the breach when others have failed. #DFIR!
Boston
Joined July 2014
- Tweets1K
- Following1.6K
- Followers2.2K
- Likes363
Pinned Tweet
A brief statement from Arsenal President Mark Spencer regarding Report I in the Bhima Koregaon case. #DFIR
As we reflect on what Arsenal accomplished in 2025 & what we have planned for 2026, we are proud to support @NECHV & @GOALupdate - two local organizations that step up when others stand down.
Arsenal Consulting retweeted
I grew up in a town of about 500 people. The only store was a mile and a half away, and my parents would hand me a quarter and send me pedaling across pastures and through the woods on my bike to buy these all the time.
Unstructured freedom with wind, dirt, risk, and independence builds a stronger kid than any glowing touchscreen ever could.
The glider in the first 30 seconds of the Welcome to Derry trailer at youtube.com/watch?v=u4JE2Ayq… is made by a company down the street from us. We had them make some promotional gifts for sentimental #DFIR practitioners... if you were alive before the NES you've probably flown one.
The glider in the first 30 seconds of the Welcome to Derry trailer at youtube.com/watch?v=u4JE2Ayq… is made by a company down the street from us. We had them make some promotional gifts for sentimental #DFIR practitioners... if you were alive before the NES you've probably flown one.
#LABScon25 lived up to the hype. Incredible talent from threat intelligence companies, law enforcement & military, & ISPs around the world brought together to share how they are dealing (often quietly) with the worst electronic threats. Life is short, do good while you can! #DFIR
We were honored to speak to @FBIBoston's Cyber Law Enforcement Working Group last week. Attendees were shown advanced analysis techniques we use in high-stakes cases & the benefits of launching disk images, actual disks, & remotely-connected disks into virtual machines. #DFIR
Read Carl Sagan's "The Demon-Haunted World: Science as a Candle in the Dark." Take special note of "The Fine Art of Baloney Detection." If you've already read it, read it again. If you are a digital forensics practitioner, keep it on your desk. en.wikipedia.org/wiki/The_De…
#DFIR
Had some extra time before presenting at the @INTERPOL_IC DFEG meeting in Scotland this week, so we gave a special presentation on the @EdinburghNapier Merchiston campus to professors & students. Great location & great people interested in digital forensics! #DFIR
We enjoyed presenting “A Case Study in the Daisy-Chain Compromise of a Lawyer” at @INTERPOL_IC's 9th Digital Forensics Experts Group meeting hosted by @EdinburghNapier & @TheCyberAcademy in Scotland. Excited to share more case studies & workshops w/ INTERPOL members soon! #DFIR
Arsenal Consulting retweeted
Placing the Suspect Behind the Keyboard: DFIR Investigative Mindset by @brettshavers is now available on Amazon!
UPDATE: Brett will adding a deal soon so wait a day before purchasing
I had the opportunity to be a beta reader for this book and I highly recommend it to both complete beginners to DFIR and seasoned professionals.
This book is full of practical exercises and techniques that will enhance your investigative skills.
amazon.com/Placing-Suspect-B…
#DFIR
If you have ever dealt with a suspected NetWire compromise, search all disk images for hex value 25732040202573072573072573. If you have hits, follow up by running our open-source tool NwStacks. Make cold cases hot. github.com/ArsenalRecon/NetW… #DFIR #Malware #MalwarePaleontology
Using NwStacks this morning, identifying extremely valuable remnants of an attacker’s use of the NetWire RAT found within a victim’s Windows 10 swap file. If you have ever dealt with a NetWire victim, check out NwStacks on our GitHub at github.com/ArsenalRecon/NetW…. #DFIR
Problem solving with the right combination of dedication and creativity can be entertaining. 😂
JSR with a very succinct summary of the situation. Limp and apathetic behavior from ISPs and law enforcement have created an environment in which these attackers have thrived for over 15 years… and continue to do so.
This quoted post is unavailable.
Agreed - @Apple, @Google, & @Microsoft should be providing *much* more detail about attacks to victims & sheep dogs, rather than demanding law enforcement involvement & international legal process… both of which they already know is unrealistic in many of these cases.
It's hard to celebrate 'state-sponsored notification' programs when the single source of information stonewalls further follow up or investigation by civil society. It turns a vital initiative by @Apple and @Google into plain CYA. #HopeImWrong
There were heavy hitters providing training to child exploitation investigators this week at the Provincial ICE Strategy Conference. Arsenal participated by running a half-day workshop showing investigators how to get access to suspects secrets faster & more effectively. #DFIR
