Skip to main content

forensicate.net

notes from the trenches

--:--:-- UTC

--:--:-- UTC

Home
Posts
Tools
Resources
Media
About

Search

Search

About

Andrew Prince. DFIR practitioner and threat hunter. Research, notes, and lessons learned live here. More →

LinkedIn GitHub YouTube

Recent Posts

Threat hunting is more than "finding evil"
2026-04-20
CBS Forensic Toolkit
2026-04-10
PowerShell Incident Response Cheatsheet
2025-07-31
Windows Event IDs for Incident Response
2025-03-17
Hello, world
2025-02-03

Archive

2026 (2)

April (2)

Threat hunting is more than "finding evil"
CBS Forensic Toolkit

2025 (3)

July (1)

PowerShell Incident Response Cheatsheet

March (1)

Windows Event IDs for Incident Response

Hello, world

Tags

cheatsheet (2)incident-response (2)defense (1)detection-engineering (1)event-logs (1)meta (1)powershell (1)soc (1)threat-hunting (1)windows (1)

Subscribe

© 2026 Andrew Prince · RSS