I've been taking a further look at the Apple Health databases as of late to refamiliarize myself with it after checking out Heather Mahalik and Jared Barnhart's talk from the SANS DFIR Summit. During their presentation "Building a Pattern of Life. Leveraging Location and Health Data" they provided all sorts... [Read More]

A short and sweet post to announce that the DFIR Discord community book The Hitchhiker's Guide to DFIR: Experiences From Beginners and Experts has officially reached release v1.0. Kudos to all the authors and contributors so far. I had the pleasure of writing a chapter on Capture The Flag (CTF) challenges... [Read More]

Shortlink: startme.stark4n6.comIf people have suggestions for additions please feel free to shoot me a message on Twitter (@KevinPagano3).Cipher & Decoding ToolsCrackStationGetting Started in DFIRCyber Aces | SANS Institute - Learn the Fundamentals of Cybersecurity for Free!Linux Forensics Intro - Hal PomeranzForensic Blog FeedThe Forgotten NookPE / Malware ToolsDogbolt - Decompiler ExplorerFLOSS... [Read More]

Previous: Egg Hunt | iPhoneThe last part of the MUS CTF was a Linux image. I will say that I have the least experience with Linux (still) so it was good to give it a go. Let's see how far the rabbit hole goes!I use print statements for my loggingWhat... [Read More]

Previous: Egg Hunt | LinuxThis year's phone of choice for the Magnet User Summit CTF was something special. We were provided an iOS 15 GrayKey image, which unless you're law enforcement most people don't have a chance to analyze these.Personal List!How many items were on Patrick's shopping list?When lists come to... [Read More]