Visualizations Keystroke Flow from Chrome Omnibox I take saved keystrokes from Chrome's Omnibox and graph them in a Sankey flow diagram.
Tools Unfurl... in 3D Unfurl has been a fun tool, but I've heard you: it's boring. This update to Unfurl will change all that!
Tools Introducing Unfurl Unfurl takes a URL and expands ("unfurls") it into a directed graph, extracting every bit of information from the URL and exposing the obscured. It does this by breaking up
Chrome Capturing Chrome's Evolution When I was pretty fresh in the field of digital forensics, I picked this new thing called Google Chrome to dig into. There weren't a lot of tools out there
Tools Chrome Evolution Chrome has evolved in many aspects since its release: the browser's appearance, capabilities, and how it stores data have all changed greatly since 2008. This page lets you explore how
Presentations & Interviews Video of "Efficiently Summarizing Web Browsing Activity" at SANS DFIR Summit 2018 I spoke at the SANS DFIR Summit 2018 on "Efficiently Summarizing Web Browsing Activity" in Austin, TX. My abstract was: Reviewing web browsing activity is relevant in a wide variety
Visualizations Visualizing Activity from Metadata Encrypted iPhone backup? That means it's useless to an investigator (or attacker), right? Not so fast. We can still get an incredible amount of insight into the actions on the
Visualizations Finding the First Thread with a Visualization Finding the first thread to pull to get an investigation started can sometimes be difficult. Having a checklist and a structured approach to your investigation can help quite a bit.
Visualizations Visualizing USN Journal Activity Since learning about the USN journal, my investigative process has never been the same. It is a powerful artifact that can tell us much about what has transpired on a
Visualizations Chrome Databases Reference Chart Updated to Chrome v35 Chrome updated to version 35 a few days ago, and I'm releasing an updated version of my "Evolution of Chrome Databases Reference Chart" to cover those new versions. The first
Visualizations The Evolution of Chrome Databases Reference Chart Google's Chrome browser was updated to version 31 today. Chrome's rapid release cycle is great for quickly rolling out security fixes and new features, but it can also be a