Blog

Alert Triage vs Endpoint Triage: What SOCs Need to Know

March 19, 2025

How to Investigate RunMRU 2026

March 9, 2025

MUICache: 2026 Guide for IT and Investigators

February 28, 2025

WMI Malware: The Complete Forensics Guide

February 20, 2025

How to Find WMI Consumers: Complete Guide for IT + Investigators

February 14, 2025

How to Investigate Malware WMI Event Consumers 2025

February 6, 2025

What Is a Jump List?

January 29, 2025

What Is Jump List Cache?

January 23, 2025

Jump Lists Forensics 2025

January 14, 2025

Information Artifacts

Information Artifacts: Simplify DFIR Analysis

January 7, 2025

3.13 Adds MemProcFS and Extends the S3 and Recorded Future Sandbox Integrations

December 18, 2024

3.12 Adds Data Exfiltration Detection, USB Devices, and Easier Validation

October 1, 2024