Skip to main content

forensicate.net

DFIR notes, research, and tools

--:--:-- UTC

--:--:-- UTC

Home
Posts
Tools
Resources
Media
About

Search

Search

About

Andrew Prince. DFIR practitioner and threat hunter. Research, notes, and lessons learned live here. More →

LinkedIn GitHub YouTube

Recent Posts

Rapidly Triage Indicators with IOC Recon
2026-07-06
AppsIndex.db: Start Menu Application Execution on Windows 11
2026-04-23
Threat hunting is more than "finding evil"
2026-04-20
CBS Forensic Toolkit
2026-04-10
PowerShell Incident Response Cheatsheet
2025-07-31
Windows Event IDs for Incident Response
2025-03-17
Hello, world
2025-02-03

Archive

2026 (4)

July (1)

Rapidly Triage Indicators with IOC Recon

April (3)

AppsIndex.db: Start Menu Application Execution on Windows 11
Threat hunting is more than "finding evil"
CBS Forensic Toolkit

2025 (3)

July (1)

PowerShell Incident Response Cheatsheet

March (1)

Windows Event IDs for Incident Response

Hello, world

Tags

cheatsheet (2)incident-response (2)windows (2)defense (1)detection-engineering (1)dfir (1)event-logs (1)evidence-of-execution (1)forensics (1)meta (1)powershell (1)soc (1)threat-hunting (1)

Subscribe

© 2026 Andrew Prince · RSS