John Sawyer

Ever had that case where so many more questions could have been answered if you had recordings of network traffic to backup your other evidence? Yeah, me, too. Network forensics can be a really valuable tool but commercial solutions don't come cheap. In this post and its followup, I'll be...

I'm a big proponent of live incident response and forensic analysis, and as such, I've been following the windows memory analysis field of research closely for the last 3 years. There have been leaps and bounds made over the last year with the release of many great acquisition and analysis tools;...