🔥 A new 13Cubed episode is out! In this episode, we'll look at a tool that can run multiple Volatility 3 plugins simultaneously, automating your memory analysis and saving you valuable time during investigations. 👉 Watch now: www.youtube.com/watch?v=0GMT... #DFIR

Automate Volatility 3 Memory Analysis with This Tool

YouTube video by 13Cubed

youtube.com

🎉 A new 13Cubed episode is up! This time we're exploring the USN Journal on a live system. How can we view it while Windows is actively running, and does the reality match the common explanations? Let's find out! www.youtube.com/watch?v=eSLH... #DFIR #DigitalForensics

How the USN Journal Really Works

YouTube video by 13Cubed

youtube.com

🍎 Happy #WWDC26 week! 🚀 We've just released a major update to Investigating macOS Endpoints, featuring an all-new hands-on macOS forensics scenario. 👉 www.youtube.com/watch?v=tRvw...

The Korvath Incident: A macOS Forensics Challenge

YouTube video by 13Cubed

youtube.com

🎉 Today, we released a major update to Investigating Windows Endpoints, with significantly expanded content on registry forensics! 🔥 Next Monday is Apple's Worldwide Developers Conference (WWDC). Watch for another exciting update for Investigating macOS Endpoints! training.13cubed.com

How about an unscheduled, impromptu Friday night 13Cubed episode? Let’s talk about Copy Fail. www.youtube.com/watch?v=ZVmp...

Hunting Copy Fail: 732 Bytes to Root

YouTube video by 13Cubed

youtube.com

It's time for a new 13Cubed episode! I've got some thoughts about AI and digital forensics. Let's talk about it. www.youtube.com/watch?v=wKn-... #DFIR

The AI Conversation I've Been Avoiding

YouTube video by 13Cubed

youtube.com

🎉 It’s time for a new 13Cubed episode! For macOS forensics, Fuji is a must-have. This episode is an excerpt from Investigating macOS Endpoints and covers the latest version, with major new changes. Let’s walk through a live acquisition! www.youtube.com/watch?v=9ZkL...

Mac Imaging Made Easy with Fuji

YouTube video by 13Cubed

youtube.com

🎉 It's time for a new 13Cubed episode! Learn about another obscure Registry-based execution artifact. www.youtube.com/watch?v=yoFk... #DFIR

The Key to Switching Apps

YouTube video by 13Cubed

youtube.com

📣 I partnered with @13cubed.bsky.social for a Valentine's Day Giveaway! 🎁 🏆1 Grand Prize winner will receive one course of their choice from the list below + a 13Cubed Investigator T-Shirt. 👕5 winners will receive a 13Cubed Investigator T-Shirt.

🚀 A new 13Cubed episode is up! Ever wondered how Windows Explorer really obtains file timestamps when you browse a directory of files? The answer might surprise you! www.youtube.com/watch?v=PdyV... #DFIR

The Truth About Windows Explorer Timestamps

YouTube video by 13Cubed

youtube.com

🎉 Happy New Year! A major update is now live across multiple 13Cubed courses. Take a look at what’s new below 👇 www.youtube.com/watch?v=CzF6...

Major Update to 13Cubed Courses: Chaos at Cobalt

YouTube video by 13Cubed

youtube.com

December is here, and so is a new 13Cubed episode! 🎉🎄 I went through your questions and had a lot of fun with this AMA/Q&A style video. www.youtube.com/watch?v=duz5... #DFIR

13Cubed AMA - Answering Your Questions!

YouTube video by 13Cubed

youtube.com

🎄🎉 Our only sale of the year is now live through Tuesday! Use code BLACKFRIDAY2025 to save $100 on all courses and bundles. training.13cubed.com #DFIR

Today we honor those who’ve served. 🎖️ 13Cubed proudly supports veterans year-round with a 10% discount through VetSec, plus 10% off for faculty, staff, and students. Reach out to info@13cubed.com or visit training.13cubed.com to learn more.

🎃 Happy Halloween Week! It's time for a new 13Cubed episode. Let's look at a quick and easy way to find the Intermediate Symbol File (ISF) for your Linux memory image and speed up your analysis. www.youtube.com/watch?v=W40g... #DFIR #Linux #MemoryForensics

The Easy Way to Analyze Linux Memory

YouTube video by 13Cubed

youtube.com

Happy 9/9! It's time for a new 13Cubed episode. 🎉 I'm sure you're as sick of hearing about AI as I am, but I have some thoughts... Let's talk about it. www.youtube.com/watch?v=lvkB... #DFIR

AI vs. Windows Forensics

YouTube video by 13Cubed

youtube.com

🚨 A new 13Cubed episode is up! In this one, I sit down with @jbradley89 to talk about his upcoming book Threat Hunting macOS -- the perfect companion to our new “Investigating macOS Endpoints" course. www.youtube.com/watch?v=8Uj2...

Behind the Book: Threat Hunting macOS with Jaron Bradley

YouTube video by 13Cubed

youtube.com

🛑✋ Well, that was fast! The contest is now closed, and all 5 winners have been selected and notified. Of course, the challenge will remain available and will hopefully serve as a great study resource for a long time to come.

13Cubed@13cubed.bsky.social · last yr.

Happy summer! ☀️ Ready for a new 13Cubed memory forensics challenge? You could win an official 13Cubed challenge coin. 🎉 Check it out here! www.youtube.com/watch?v=6JN6... #DFIR

Happy summer! ☀️ Ready for a new 13Cubed memory forensics challenge? You could win an official 13Cubed challenge coin. 🎉 Check it out here! www.youtube.com/watch?v=6JN6... #DFIR

Windows Memory Forensics Challenge

YouTube video by 13Cubed

youtube.com

This Monday, we’re dropping a new memory forensics challenge—this time focused on Windows! Like the last Linux one, you’ll have a chance to win a 13Cubed Challenge Coin. Subscribe at youtube.com/13cubed and click the 🔔 so you’re notified!

13Cubed

Digital Forensics. Hacking. Home Labs.

youtube.com

We just issued our 500th 13Cubed certification! 🎉 Learn more at 13cubed.com/certs. All Windows, Linux, and macOS courses include certification attempts at no extra cost, allowing you to demonstrate real-world practical application of forensic investigative techniques. 🏅

🎉 Big news! Investigating macOS Endpoints is now live—plus our new *NIX Bundle and XPlat Bundle Complete (all 13Cubed courses in one package). Thanks for patiently waiting! Dive in now 👉 training.13cubed.com #DFIR #macOS #Linux

🎉 It’s time for a new 13Cubed episode! We’ll briefly explore how process hollowing works and check out the relatively new windows.hollowprocesses plugin for Volatility 3. There are also two memory samples you can download for practice! www.youtube.com/watch?v=x5mG... #DFIR

A New(ish) Way to Detect Process Hollowing

YouTube video by 13Cubed

youtube.com

🎉 Happy Friday! Two quick updates: Investigating macOS Endpoints and related bundles are now open for waitlisting! 👉 13cubed.com 13Cubed Merch Store is LIVE with fresh designs and premium shirts! 👉 shop.13cubed.com

13Cubed

Official 13Cubed merch.

shop.13cubed.com

It's time for a new 13Cubed episode! 🎉 This is a small excerpt from one of the lessons in the upcoming "Investigating macOS Endpoints" course. Look for the course release this summer! www.youtube.com/watch?v=9bEi... #DFIR #macOS

Getting Started with Fuji - The Logical Choice for Mac Imaging

YouTube video by 13Cubed

youtube.com

It's time for a new 13Cubed episode covering a very obscure evidence of execution artifact. www.youtube.com/watch?v=edJa... Enjoy! #DFIR

RADAR Contact! An Obscure Evidence of Execution Artifact

YouTube video by 13Cubed

youtube.com

Happy New Year! 🎉🥳 The first 13Cubed episode of 2025 is here! Let's explore some groundbreaking research from CyberCX on “rewinding the NTFS USN Journal.” www.youtube.com/watch?v=GDc8... #DFIR

Be Kind, Rewind... The USN Journal

YouTube video by 13Cubed

youtube.com

Happy Friday the 13th! 🎉 We’re thrilled to share that our next 13Cubed course—Investigating macOS Endpoints—is officially in the works. This highly requested training is now our top priority, with a target launch by mid-2025. We'll keep you updated along the way! #DFIR

Happy Cyber Monday! 🎉 A brand-new 13Cubed episode on NTFS FILE record reuse is out now. Dive into the details and don’t forget—today’s the final day to save 13% on all 13Cubed training courses with code BLACKFRIDAY2024. Ends at 00:00 UTC Dec 3. www.youtube.com/watch?v=6LpJ... #DFIR

NTFS FILE Record Reuse

YouTube video by 13Cubed

youtube.com

🎉🦃 The 13Cubed Black Friday sale is now live through Monday. Use coupon code BLACKFRIDAY2024 to save 13% -- our biggest promotion of the year. #DFIR