Forensic Fellowship

Friendly location for those who like digital forensics.

Home
DFIR
Cloud Security
Recent Artifacts
DFIR Watchtower

DFIR Watchtower

Weekly DFIR Watchtower

DFIR Watchtower
Updated Weekly

View Report →

Recent Digital Forensic Artifacts
Updated Periodically

View Artifacts →

🔧 Open-Source DFIR Tools
github.com/forensicfellowship/Open_Source_DFIR_Tools

View on GitHub →

Topics

DFIR (5)

Search This Blog

About Me

Bryan Ambrose: Researcher and tool developer focused on digital forensics and incident response(DFIR). Working towards D.Sc. in Cybersecurity. Interested in building open-source DFIR tooling in Python, Rust, and Go — see https://github.com/forensicfellowship/Open_Source_DFIR_Tools. Adjunct instructor and CEH instructor. GCFA · GCFR · GASF · GCFE · GCIH · GLIR · OSCP. The data tells the story; the examiner has to read it. Email: bryan.ambrose@forensicfellowship.com

View my complete profile

Blog Archive

▼ 2026 (8)
- ▼ April (2)
  - SSH Port Forwarding for DFIR Analysts
  - Supply Chain Attack Forensics: Artifact Reference
- ► March (6)

► 2021 (1)
- ► February (1)

► 2020 (7)
- ► December (2)
- ► September (2)
- ► July (1)
- ► May (2)

► 2019 (20)
- ► August (1)
- ► July (1)
- ► June (6)
- ► May (7)
- ► April (5)

The Forensic Fellowship

Views expressed are my own and do not represent my employer or any affiliated institution. Content is provided for educational and research purposes only.

Navigate

Home DFIR Watchtower Recent Artifacts

Connect

🔗 GitHub — forensicfellowship 🔗 LinkedIn — Bryan Ambrose ✉ bryan.ambrose@forensicfellowship.com

GCFA · GCFR · GASF · GCFE · GCIH · GLIR · OSCP

Forensic Fellowship

DFIR Watchtower

Recent Posts

Total Pageviews