The AI Conversation I've Been Avoiding YouTube video by 13Cubed

It's time for a new 13Cubed episode! I've got some thoughts about AI and digital forensics. Let's talk about it.

www.youtube.com/watch?v=wKn-...

#DFIR

Mac Imaging Made Easy with Fuji YouTube video by 13Cubed

🎉 It’s time for a new 13Cubed episode!

For macOS forensics, Fuji is a must-have. This episode is an excerpt from Investigating macOS Endpoints and covers the latest version, with major new changes. Let’s walk through a live acquisition!

www.youtube.com/watch?v=9ZkL...

The Key to Switching Apps YouTube video by 13Cubed

🎉 It's time for a new 13Cubed episode! Learn about another obscure Registry-based execution artifact. www.youtube.com/watch?v=yoFk... #DFIR

📣 I partnered with @13cubed.bsky.social for a Valentine's Day Giveaway! 🎁

🏆1 Grand Prize winner will receive one course of their choice from the list below + a 13Cubed Investigator T-Shirt.

👕5 winners will receive a 13Cubed Investigator T-Shirt.

The Truth About Windows Explorer Timestamps YouTube video by 13Cubed

🚀 A new 13Cubed episode is up! Ever wondered how Windows Explorer really obtains file timestamps when you browse a directory of files? The answer might surprise you! www.youtube.com/watch?v=PdyV... #DFIR

Major Update to 13Cubed Courses: Chaos at Cobalt YouTube video by 13Cubed

🎉 Happy New Year!

A major update is now live across multiple 13Cubed courses. Take a look at what’s new below 👇

www.youtube.com/watch?v=CzF6...

13Cubed AMA - Answering Your Questions! YouTube video by 13Cubed

December is here, and so is a new 13Cubed episode! 🎉🎄 I went through your questions and had a lot of fun with this AMA/Q&A style video. www.youtube.com/watch?v=duz5... #DFIR

🎄🎉 Our only sale of the year is now live through Tuesday! Use code BLACKFRIDAY2025 to save $100 on all courses and bundles. training.13cubed.com #DFIR

Today we honor those who’ve served. 🎖️

13Cubed proudly supports veterans year-round with a 10% discount through VetSec, plus 10% off for faculty, staff, and students.

Reach out to info@13cubed.com or visit training.13cubed.com to learn more.

The Easy Way to Analyze Linux Memory YouTube video by 13Cubed

🎃 Happy Halloween Week! It's time for a new 13Cubed episode. Let's look at a quick and easy way to find the Intermediate Symbol File (ISF) for your Linux memory image and speed up your analysis. www.youtube.com/watch?v=W40g... #DFIR #Linux #MemoryForensics

AI vs. Windows Forensics YouTube video by 13Cubed

Happy 9/9! It's time for a new 13Cubed episode. 🎉 I'm sure you're as sick of hearing about AI as I am, but I have some thoughts... Let's talk about it. www.youtube.com/watch?v=lvkB... #DFIR

Behind the Book: Threat Hunting macOS with Jaron Bradley YouTube video by 13Cubed

🚨 A new 13Cubed episode is up! In this one, I sit down with @jbradley89 to talk about his upcoming book Threat Hunting macOS -- the perfect companion to our new “Investigating macOS Endpoints" course. www.youtube.com/watch?v=8Uj2...

🛑✋ Well, that was fast! The contest is now closed, and all 5 winners have been selected and notified. Of course, the challenge will remain available and will hopefully serve as a great study resource for a long time to come.

Windows Memory Forensics Challenge YouTube video by 13Cubed

Happy summer! ☀️ Ready for a new 13Cubed memory forensics challenge? You could win an official 13Cubed challenge coin. 🎉 Check it out here! www.youtube.com/watch?v=6JN6... #DFIR

13Cubed Digital Forensics. Hacking. Home Labs.

This Monday, we’re dropping a new memory forensics challenge—this time focused on Windows! Like the last Linux one, you’ll have a chance to win a 13Cubed Challenge Coin.

Subscribe at youtube.com/13cubed and click the 🔔 so you’re notified!

We just issued our 500th 13Cubed certification! 🎉 Learn more at 13cubed.com/certs. All Windows, Linux, and macOS courses include certification attempts at no extra cost, allowing you to demonstrate real-world practical application of forensic investigative techniques. 🏅

🎉 Big news! Investigating macOS Endpoints is now live—plus our new *NIX Bundle and XPlat Bundle Complete (all 13Cubed courses in one package). Thanks for patiently waiting! Dive in now 👉 training.13cubed.com #DFIR #macOS #Linux

A New(ish) Way to Detect Process Hollowing YouTube video by 13Cubed

🎉 It’s time for a new 13Cubed episode! We’ll briefly explore how process hollowing works and check out the relatively new windows.hollowprocesses plugin for Volatility 3. There are also two memory samples you can download for practice! www.youtube.com/watch?v=x5mG... #DFIR

13Cubed Official 13Cubed merch.

🎉 Happy Friday! Two quick updates:

Investigating macOS Endpoints and related bundles are now open for waitlisting! 👉 13cubed.com

13Cubed Merch Store is LIVE with fresh designs and premium shirts! 👉 shop.13cubed.com

Getting Started with Fuji - The Logical Choice for Mac Imaging YouTube video by 13Cubed

It's time for a new 13Cubed episode! 🎉 This is a small excerpt from one of the lessons in the upcoming "Investigating macOS Endpoints" course. Look for the course release this summer! www.youtube.com/watch?v=9bEi... #DFIR #macOS

RADAR Contact! An Obscure Evidence of Execution Artifact YouTube video by 13Cubed

It's time for a new 13Cubed episode covering a very obscure evidence of execution artifact. www.youtube.com/watch?v=edJa... Enjoy! #DFIR

Be Kind, Rewind... The USN Journal YouTube video by 13Cubed

Happy New Year! 🎉🥳 The first 13Cubed episode of 2025 is here! Let's explore some groundbreaking research from CyberCX on “rewinding the NTFS USN Journal.” www.youtube.com/watch?v=GDc8... #DFIR

Happy Friday the 13th! 🎉 We’re thrilled to share that our next 13Cubed course—Investigating macOS Endpoints—is officially in the works. This highly requested training is now our top priority, with a target launch by mid-2025. We'll keep you updated along the way! #DFIR

NTFS FILE Record Reuse YouTube video by 13Cubed

Happy Cyber Monday! 🎉 A brand-new 13Cubed episode on NTFS FILE record reuse is out now. Dive into the details and don’t forget—today’s the final day to save 13% on all 13Cubed training courses with code BLACKFRIDAY2024. Ends at 00:00 UTC Dec 3.

www.youtube.com/watch?v=6LpJ... #DFIR

🎉🦃 The 13Cubed Black Friday sale is now live through Monday. Use coupon code BLACKFRIDAY2024 to save 13% -- our biggest promotion of the year. #DFIR

🎉🦃 Our annual Black Friday sale starts Friday, November 29, and runs through Monday, December 2. All courses and bundles will be 13% off for individual purchases. Standard bulk discount rates apply. #DFIR

‎Skeebus ‎Skeebus is a macOS app that displays your current public IP address in the menu bar, along with a country flag. You can optionally choose to hide the IP address and only display the country flag. The...

I just released an update to Skeebus, my macOS GeoIP menu bar app. Check it out! apps.apple.com/us/app/skeeb... #macOS

Hello! 👋