The Forensics Way

CI/CD Github Pipeline to Azure Blob Storage

Keeping your static site update with just a push

Read article →

Deploying My Astro Static Site with Azure

Adventure to figure out where to deploy

Nov 7, 2025 forensics

Forensic Timelining

Different method to creating a timeline

May 18, 2025 git

Creating Github-Page is a Pain

My method of getting this site to work.

May 11, 2025 astro

Getting Started with Astro

Learn how to build static sites with Astro's modern web development framework.

Community

Submit a Sample Contribute malware for analysis

Track Analysis Monitor the analysis pipeline

Resources Curated forensics tools & links

Free Course DFIR fundamentals, slide by slide

From the latest The Forensics Way Newsletter Read issue →

Latest issue · April 14, 2026

Nation-State Infrastructure

The DOJ, FBI, UK NCSC, and allied agencies revealed on April 8 the court-authorized disruption of Operation Masquerade — a Russian GRU (APT28 / Fancy Bear) botnet of 18,000 compromised SOHO routers across 120+ countries.…

Operation Masquerade Dismantled: DOJ and Allies Seize APT28's 18,000-Router DNS Hijacking Network

CERT-EU's Kill Chain: How TruffleHog Became the Attacker's Pivot Tool Inside the Commission's AWS Environment

CERT-EU's April 12 reconstruction confirmed the Trivy breach reached 71 EU entities — 42 Commission bodies plus 29 other EU organizations. After obtaining the initial AWS API key, the attacker immediately used TruffleHog…