Independent UK-based digital forensics and expert witness; examining digital evidence for law firms, businesses and private clients. Get clear answers.
UK
Joined February 2012
- Tweets1.4K
- Following3.5K
- Followers1.8K
- Likes158
Alistair Ewing retweeted
Thank you to Edulactica and the European Compliance Center
for your kind invitation to present my webinar at your event today.
Well done @ComputeForensic. lnkd.in/dqSmjTdn
Alistair Ewing retweeted
Today Chancellor @RishiSunak announced a new HM Treasury and @bankofengland taskforce to explore a UK central bank digital currency. #UKFW21
Read more: gov.uk/government/news/ambit…
ALT Central bank digital currency taskforce
Alistair Ewing retweeted
#WIN an @AMD gaming PC feat Ryzen 7 3700X & @PowerColor Radeon RX 5700 XT!!! WORTH OVER £1500!! @ScanComputers weekly #giveaway! Its free and open worldwide! Enter here: bit.ly/2zgBLFN
#competition #winit #friyay #AMD #Ryzen #Radeon #LoveScan #gamingpc #PCMR @AMD_UK
Alistair Ewing retweeted
Introducting WxTCmd! A tool to process Windows 10 (1803+) Timeline databases! binaryforay.blogspot.com/201… #DFIR
Alistair Ewing retweeted
Introducing VSCMount, a command line tool that takes a source drive letter and destination directory, then mounts all VSCs from source into links under destination binaryforay.blogspot.com/201… #DFIR
Alistair Ewing retweeted
Breaking: Plaso now supports Forensic Artifacts filters! i.e. things like this is possible: log2timeline.py --artifact_filters BrowserHistory webhistory.plaso image.dd - fast triage timelines is now super easy to create! #DFIR blog.kiddaland.net/2018/07/p…
Alistair Ewing retweeted
Seeing a lot of commentary about how "we do this better than our competitors"...never going to happen but would love to see more posts about what data is being presented better and why, or common datasets run across the gamut of tools. #DFIR
Alistair Ewing retweeted
Did you know there are advanced USB devices and OS exploits that can infect your examiner workstation if you don’t take the appropriate precautions? Learn all about it with James Habben @JamesHabben #PFIC2018 this fall in Park City, UT! #DFIR #infosec bit.ly/2w2FkAM
Alistair Ewing retweeted
Forensic people - usually we are expect to keep cases as archives - in case of appeal, re-trials etc. Our work is all covered by legal priv and our obligations as an expert.
In terms of GDPR does this really have impact on such an archive (which yes will have personal data)?
Alistair Ewing retweeted
Just launched Arsenal Image Mounter v2.6.35 Beta! Please spread the word and try the new features. Let us know what you like and what you don't! More details and screenshots of new features coming soon. arsenalrecon.com/downloadsre… #DFIR
Alistair Ewing retweeted
We’ll be releasing new research findings & demonstrating new Hibernation Recon functionality at our @OverDrive_Con workshop “Advancements in Windows Hibernation Forensics” on April 19. We hope our #DFIR & #InfoSec friends in Spain will join us in #Girona!
Alistair Ewing retweeted
#DWF rolls out employability programme across #NorthernIreland schools: buff.ly/2GhN85n @DWF_Law #education
Alistair Ewing retweeted
Find valuable evidence which exists only in Fast Boot hibernation and hive transaction logs #DFIR #infosec #windowsforensics #cybersecurity dfir.world/ARSENAL_Hiber
Alistair Ewing retweeted
@ComputeForensic Thank you for your mention of CAINE and feel free to ask what you need ;-) compute-forensics.com/top-te…
Alistair Ewing retweeted
Hi Alistair! Good news re: your mention of Arsenal Image Mounter at compute-forensics.com/top-te… - both non-commercial & commercial use are fine. We only require special licensing when developers want to integrate our source & APIs into their projects. #DFIR
Alistair Ewing retweeted
Hi Alistair! Good news re: your mention of Arsenal Image Mounter at compute-forensics.com/top-te… - both non-commercial & commercial use are fine. We only require special licensing when developers want to integrate our source & APIs into their projects. #DFIR
Alistair Ewing retweeted
Virtual machine downloads (full Windows and Linux OSs!) for testing, sandboxing, and forensicating!
dfir.training/tools/virtuali… #DFIR #infosec
Alistair Ewing retweeted
New Autopsy Release has new Communications UI, Central Hash DBs, USB Triage Drive, encryption detection and more.
Blog With Details: autopsy.com/autopsy-4-6-incl…
Download: sleuthkit.org/autopsy/downlo… #DFIR
