Profile avatar
stark4n6.bsky.social
Lethal forensicator, researcher, developer, blogger, curator of many fine t-shirt designs, resident #DFIR beer drinker https://startme.stark4n6.com
272 posts 917 followers 84 following
Prolific Poster

#Stark4N6: Forensics StartMe Updates (6/1/2025) #DFIR www.stark4n6.com/2025/06/fore...

I always hate packing because I either forget something or pack too much and it's heavy, can't find that balance

For anyone going to Techno Security next week, I'll have plenty of stickers on hand to give out, also some pins and buttons too!

Hashes for the Masses: Finding What Matters in a Sea of Samples #DFIR #MalwareAnalysis #Hash #MalChela

Anyone else just jam out to this constantly on Windows XP?!

Snakes, why did it have to be snakes

Former bird site getting hit again with outages I see

🎉 It’s time for a new 13Cubed episode! We’ll briefly explore how process hollowing works and check out the relatively new windows.hollowprocesses plugin for Volatility 3. There are also two memory samples you can download for practice! www.youtube.com/watch?v=x5mG... #DFIR

“Life is better when we leap together.” Kermit the Frog delivered a commencement speech at the University of Maryland on Thursday, the alma mater of his creator, Jim Henson. nyti.ms/4dwMuhQ

Is Purview crapping out for anyone else today? What are we doing Microsoft?!

35% sale happening now #DFIR www.teepublic.com/user/stark4n6

MalChela 2.2 “REMnux” Release More tools. More Docs. More Power. #DFIR #MalwareAnalysis #YaraX #Volatility #Tshark #MalChela

The irony of The Doors Rider's on the Storm coming on as I'm driving through an absolute monsoon

Happy Five/Nine Day to those who celebrate

I was today year's old when I found out they make Thunderbolt 5 NVME enclosures now, look at this beast amzn.to/4jGyR1L

CyberPipe v5.1 is out with a few targeted improvements to make live response a bit smoother. Collection profiles can now be passed directly as arguments using -CollectionProfile. No need to modify the script or hardcode anything… bakerstreetforensics.com/2025/05/08/c... #DFIR

"iOS Unified Logs: The Myth of 30 Days Retention - Analysis of TTLs and log stats Command" -> www.ios-unifiedlogs.com/post/ios-uni... #DFIR #iOS #logs

🚀 MalChela v2.1 is now live! This update focuses on smoother workflows, better third-party tool integration, and more control for forensic analysts and malware researchers.

Amazon driver just pulled up with the windows down blasting Rick Astley 😂

Week 17 - 2025 #DFIR thisweekin4n6.com/2025/04/27/w...

I recorded a brief video, walking through some of the different functions in MalChela in the new GUI, stepping through basic static analysis to yara rule writing - all in minutes.

youtu.be/hI1EqojI1DA #DFIR #MalwareAnalysis #YARA #MITRE #Rust MalChela: github.com/dwmetz/MalCh...

Arsenal Image Mounter v3.11.307 is now available with minor fixes & other improvements which include improved handling of corrupt Registry hives when launching virtual machines. See the change log for more information. arsenalrecon.com/downloads #DFIR

Whose bright idea was it to put outlets at the airport on a slant downward so chargers just fall out unless they have a ground pin 😂

It's a new day, another day to hate Purview once again 😂

Have you ever wondered whether a iOS sysdiagnose contains all Unified Logs entries? I did: Logs in a Sysdiagnose - It's about time... www.linkedin.com/pulse/logs-s... #iOS #dfir #forensics #unifiedlogs

Week 16 – 2025 #DFIR thisweekin4n6.com/2025/04/20/w...

Arc2Lite v0.0.6 release: 🪟 GUI added 🐛 Bug fixes 🔗 Download link: github.com/stark4n6/Arc...

#Stark4N6: Tracking iOS App Installs and Purchase History with StoreUser DB #DFIR www.stark4n6.com/2025/04/trac...

Week 15 - 2025 #DFIR thisweekin4n6.com/2025/04/13/w...

It's days like today that make me appreciate having a cold DIPA in the fridge 😂 🍻

Tonight's fortune 🥠

iLEAPP v2.1.2 out now! #DFIR #MobileForensics github.com/abrignoni/iL...

Check out our first episode of the #TruthInData podcast! Our topic this week: Evidence Gone: The Perils of Delayed Mobile Acquisition youtu.be/vb0G-uLvwMM?... With Debbie Garner & Kim Bradley #DFIR

Weekend sale happening now

I wish there was an easy way to know what Discord server a ping noise is coming from

#Stark4N6: Forensics StartMe Updates (4/1/2025) #DFIR www.stark4n6.com/2025/04/fore...

Inactivity reboot coming to Android 16?! #DFIR www.androidauthority.com/android-inac...

It’s not often that I get to revisit old research, but this has happened twice now in the past couple of months. There’s an update to my Google Maps on Android article. "We practitioners are in a constant state of learning; our discipline requires it.” #DFIR thebinaryhick.blog/2023/10/17/f...

We are excited to announce that the @volatilityfoundation.org #PluginContest First Place winner is: Valentin Obst for btf2json Read the full Contest Results: volatilityfoundation.org/the-2024-vol... Congrats to all winners & thank you to all participants! #DFIR #memoryforensics

🗝️ Currently attending the DEX-XL digital forensics conference in Noordwijkerhout, Netherlands, delivering a keynote on Digital Forensics Scripting. 🌷 Had a chance to spend an afternoon in Amsterdam, one of the most beautiful cities in Europe. #DigitalForensics #DFIR #MobileForensics #DEXXL

You could not write a crossover episode between "Arrested Development" and "It's Always Sunny in Philadelphia" that even remotely approached this level of incompetence.

When you wonder why a semi-frequently used tool hasn't been updated in years... because the author passed away 😢

Some of you asked previously, so I'm partnering with Hexordia to provide 15% off training courses, use promo code KP15 at checkout! #DFIR #DFIRTraining learn.hexordia.com?affCode=TCMPMD

One of the lowest prices I've seen on this 4TB Samsung T9 amzn.to/41XwOyJ