Brett Shavers
@brettshavers.bsky.social
Fell off a cliff. Swam with sharks. Dined with hitmen. Hung out with crime bosses. Bought and sold a ton of drugs. How the heck am I still here? DFIR USMC 🚓
Join us July 29 at 11:00 AM ET for a live and interactive Ask Me Anything (#AMA) session with seasoned #DFIR practitioners as they tackle your toughest #IncidentResponse questions and share practical guidance from real-world investigations. Register now: https://ow.ly/RaYh50ZmchU
🚨All DFIR Investigators Save 10% Discount Code: 10%4DFIR | Register Now dfrws.org Join DFRWS USA at the GMU campus in Arlington, VA for Chain of Infection Detection: A Hands-On Workshop on Cross-Domain Forensic Artifact Correlation. #DigitalForensics #DFIR #CyberSecurity #LawEnforcementTech
🔎 New on the LEAPPs Artifact Browser: click "samples" on any parser to see the test images it was validated against, with row counts. Knowing what a tool was tested against is the work, not a nice to have. leapps.org/artifacts #DFIR
Artifacts — LEAPPs
Browse all artifacts supported by iLEAPP, ALEAPP, RLEAPP, and VLEAPP.
leapps.org
🚨 The new LEAPPS.org webpage is online! 🌐 New website design in dark mode as all pages should be. 🌐 Sign up for our mailing list at the end of the home page. Easy way to keep track of the latest happenings in the LEAPPs & LAVA community. 🌐 Much more coming up soon! Check it out: www.leapps.org #DFIR
Kali Linux 2026.2 released with 9 new tools, NetHunter updates
Kali Linux 2026.2 released with 9 new tools, NetHunter updates
Kali Linux 2026.2, the second release of the year, is now available for download, featuring 9 new tools and numerous Kali NetHunter improvements.
bleepingcomputer.com
Attribution is not just finding evidence. It is explaining what the evidence supports, what it does not support, and what alternative explanations remain. Live online: Attribution in DFIR training. June 24, 1 PM MDT. www.suspectbehindthekeyboard.com/offers/nFCYq... #DFIR
🎙️New Digital Forensics Now Podcast! We spoke with Heather Barnhart from SANS Institute about her AI Investigative Framework and using LLMs responsibly in #DigitalForensics work. 👉🏽 youtu.be/bTHIw1ob4i4
The AI Investigative Framework Interview with Heather Barnhart
The Digital Forensics Now Podcast S3 - 5 The framework can be found here: https://www.linkedin.com/posts/heather-barnhart-cellebrite_ai-dfir-digitalforensics-ugcPost-7463670252950847488-b7s-
youtu.be
399 DFIR practitioners are already registered. What can a DFIR practitioner actually do with an LLM in casework without wrecking the case or career? Live webinar. Tues Apr 21. 12PM MT. One time only. www.suspectbehindthekeyboard.com/offers/2QFz3...
Incredible stat. Where do you fit, #DFIR? www.dfir.training/blog/56-of-d...
56% are either likely to leave DFIR within 12 months or unsure if they’ll stay.
DFIR Is Burning People Out. Digital forensics has a burnout problem. This isn't new news, but it is important.Forensic Focus and Northumbria University are running an anonymous international well-bein...
dfir.training
www.dfir.training/blog/a-pract... #DFIR
A Practical Map of the DFIR Internet: Marketplaces, FAQs, and Fire Exits
The right DFIR resource at the right moment is worth more than ten bookmarked sites you never learned how to use.No one DFIR website does everything well. And it shouldn’t. Trying to be everything usu...
dfir.training
On Feb 24 at Magnet's FREE virtual summit, @dwmetz.bsky.social and I will be talking about DF and IR, but not about "DFIR", if you know what I mean. magnetvirtualsummit.com/registration... #DFIR
Investigative Decision-Making in #DFIR. Thursday. Feb 5, 2026. 11AM PT. A 24-hour replay, and then it's gone. You will see attribution in a totally different light. www.suspectbehindthekeyboard.com/offers/fUKjJ...
Eventually, human-created content (audio, visual, written word) is going to become really expensive.
📢 Publication du FACT Attribution Framework v1.0 pour relier preuves numériques et attribution humaine 📝 Selon la notice de publication of… https://cyberveille.ch/posts/2025-12-10-publication-du-fact-attribution-framework-v1-0-pour-relier-preuves-numeriques-et-attribution-humaine/ #DFIR #Cyberveille
Sharing #DigitalEvidence shouldn’t slow a case down. With Portable Case, you can securely share case data—without needing full forensic tools. Learn about some of the most powerful features of Portable Case and see how they can be particularly effective for investigators: ow.ly/9aZQ50XXnmt
The same people who pushed you for speed during the primary incident will ask you, with a straight face, why you didn’t preserve the things they now need. www.linkedin.com/pulse/dfir-t... #DFIR
The DFIR Three-Body Problem
Let me first interject first this so you don’t miss it - Magnet MVS 2026 The Magnet Virtual Summit 2026 is free (Feb 23–26). When you register, you’re entered to win a full year of Magnet Forensics tr...
linkedin.com
Your #DFIR report is fine… until you name a person. brettshavers.com/brett-s-blog...
Your DF/IR Tool Can’t Tell You Who Did It. FACT Tells You When You’re Allowed To.
DF/IR doesn’t usually fail on the technical work. It fails at the exact moment someone gets impatient and confuses activity with identity, and then confuses identity with attribution. “This account di...
brettshavers.com
Soundtrack for #DFIR get into the mood. www.youtube.com/playlist?lis...
Tie the Act to the Actor — DFIR Soundtrack (Official Music Video) - YouTube
Track 1: Tie the Act to the ActorTrack 2: Pattern of LifeTrack 3: Tracing Criminals OnlineTrack 4: Investigative MindsetTrack 5: CaseworkTrack 6: Order of Vo...
youtube.com
