This week I'm talking .Trash. I cover the forensic basics of this Mac artifact that examiners need to know.

This week I talk about Mac Log files that are useful for File Use & Knowledge investigations as well as Incident Response.

This week I talk about Apache weblogs and a great resource for foundational knowledge at aid newer examiners with forensic analysis. In addition, big news for the SDF series!

This week it's back to Mac forensics with a look at the the Finder Sidebar and it's value for File Use & Knowledge investigations.

This week I pull back the focus for newer examiners and share some thoughts on creating a system that works for you to organize, and keep readily accessible, all the knowledge you accumulate..... and a few words about Shimcache on Windows 10.