Brett's Ramblings https://brettshavers.com/brett-s-blog Tue, 23 Jun 2026 17:18:11 -0700 Joomla! - Open Source Content Management en-gb https://brettshavers.com/brett-s-blog/entry/forbidden-dfir https://brettshavers.com/brett-s-blog/entry/forbidden-dfir The longer I work in digital forensics, the more I notice certain topics are rarely discussed in public, and maybe not even in private. These aren’t secret or controversial topics, but because they force us to examine assumptions that have become par...

]]> Digital Forensics Mon, 22 Jun 2026 23:18:38 -0700 https://brettshavers.com/brett-s-blog/entry/will-tomorrow-be-your-dfir-mann-gulch https://brettshavers.com/brett-s-blog/entry/will-tomorrow-be-your-dfir-mann-gulch Most DFIR training teaches tools. Timelines. X-Ways filters. Database analysis. Registry carving. But it rarely teaches judgment, even though judgment is what saves (or sinks) an investigation when the evidence refuses to cooperate. I understand, tho...

]]> Digital Forensics Sun, 07 Jun 2026 18:13:59 -0700 https://brettshavers.com/brett-s-blog/entry/the-difference-between-no-one-will-hire-me-and-i-can-no-longer-professionally-allowed-to-do-this-dfir-work https://brettshavers.com/brett-s-blog/entry/the-difference-between-no-one-will-hire-me-and-i-can-no-longer-professionally-allowed-to-do-this-dfir-work A recent discussion on LinkedIn about DF/IR accountability made me realize that several people, including (or mostly…) me, were using the word “accountability” to mean entirely different things. That’s important because the point changes depending on...

]]> Digital Forensics Mon, 01 Jun 2026 08:02:12 -0700