Unfurl Metasploit URLs, Hash Lookups, & More in Unfurl v2021.06.15 A new Unfurl release is here! v2021.06.15 adds decoding of some Metasploit URLs, hash identification and API lookups, & more!
Hindsight Unfurl Plugin and "Site Characteristics" Artifact Added in Hindsight I'm happy to announce there is a new Hindsight release available! 2021.04.26 has many small improvements and fixes, including adding support Chrome 88 - 90, but the main new features are an Unfurl plugin and parsing of the Site Characteristics Database! Unfurl
Presentations & Interviews Unfurl on "Life Has No Ctrl+Alt+Delete" A few weeks ago I was on "Life Has No Ctrl+Alt+Del" with @HeatherMahalik of Cellebrite giving an overview of Unfurl, how to use it, and walking through (many) examples. The video recording is now up!
Digital Forensics Tinkering with TikTok Timestamps I tinker with TikTok - and find a timestamp embedded in video URLs!
Unfurl New Unfurl Version Released A new version of Unfurl is here! v20200729 adds: improved Google Search URL parsing (RLZ and EI parameters), more short-link expansions, DuckDuckGo search parsing, mailto link parsing, and a better Docker setup.
Python Another Google Search Parameter? For RLZ! There are many query string parameters in Google Search URLs that hold interesting information. The rlz parameter is no exception, but thankfully it isn't as mysterious as many others; Google
Unfurl Unfurl CLI version (and now on PyPI) A new Unfurl version brings a CLI tool & easier installs via PyPI.
Digital Forensics Unfurling Unknown Protobufs With this latest update, Unfurl can now parse protobufs as well! If you hover over a field, Unfurl tries to explain a bit about wire types and possible other data formats.
Tools Unfurl... in 3D Unfurl has been a fun tool, but I've heard you: it's boring. This update to Unfurl will change all that!
Presentations & Interviews Talking about Unfurl on the Forensic Lunch Ryan Benson on Dave Cowen's Forensic Lunch talking about Unfurl (and other DFIR things).
Tools Introducing Unfurl Unfurl takes a URL and expands ("unfurls") it into a directed graph, extracting every bit of information from the URL and exposing the obscured. It does this by breaking up
