Tessera
Folgen

Ryan Benson

@hindsig.ht

13 Posts148 Follower348 Folgt
Ryan Benson@hindsig.ht · 3mo ago

There's a new Hindsight release! New features in v2026.04 include: - Parsing Sessions_* and Tabs_* files (SNSS) into the Timeline and a "Sessions" tab - Parsing of Platform Notifications (shown/clicked) - More fields for URL Visit rows (with KGraph lookups) dfir.blog/hindsight-pa... #DFIR #Chrome

Hindsight v2026.04 Released!

Hindsight v2026.04 adds parsing of Session files (including form data), platform notifications, & Google Knowledge Graph lookups for page categories and entities!

dfir.blog

Ryan Benson@hindsig.ht · 6mo ago

Have a big number (or hex value) you found and think might be a timestamp? Drop it in `unfurl` in the terminal and see what comes out! (add -d or --detailed if you want the type of timestamp, or run without it if you just want the value) #DFIR #BF4SA #Unfurl 🌿

Ryan Benson@hindsig.ht · 6mo ago

There's a new Hindsight release! v2026.01 brings new features, including: 🔄 Parsing Sync Data ⌨️ Updated terminal interface 📂 Improved output formats ⚙️ Many fixes and enhancements Read more at dfir.blog/hindsight-v2... or download the new version from GitHub: github.com/obsidianfore...

Hindsight v2026.01 Released!

Hindsight v2026.01 brings new features, including parsing Sync Data, an updated terminal interface, improved output formats, and dozens of fixes and enhancements.

dfir.blog

Matt Johansen@mattjay.com · last yr.

This story is absolutely insane. And we don't usually get a front-row seat to insider threat investigations Spy got tricked by a honeypot and implicated the most senior leaders at the victim's biggest competitors. I go through it all here: youtu.be/tDG1WfbSZFo

Bild
Ryan Benson@hindsig.ht · last yr.

Unfurl v2025.03 is live and adds new features, including: 🔎 Parsing #Google Search's UDM parameter 🐘 Recognizing #Mastodon usernames and parsing forks (like truthsocial[.]com and gab[.]com) 🧹 Utility parser to "clean up" inputs Try it: unfurl.link Blog post: dfir.blog/unfurl-parse... #DFIR #OSINT

Unfurl 2025.03

Unfurl v2025.03 adds new features, including parsing Google Search's UDM parameter, support for Mastodon forks (like Truth Social), and a utility parser to "clean up" inputs.

dfir.blog

Ryan Benson@hindsig.ht · last yr.

There's a new Hindsight release! Hindsight v2025.03 focuses on Extensions - parsing more activity and state records, highlighting Extension permissions, and making it easier to examine Manifests. 🌐 Blog: dfir.blog/hindsight-pa... 🛠️ Tool download: hindsig.ht/release #DFIR #Chrome #Extensions

Hindsight v2025.03 Released!

Hindsight v2025.03 focuses on Extensions - parsing more activity and state records, highlighting Extension permissions, and making it easier to examine Manifests.

dfir.blog