@Phillmoore@infosec.exchange

Phillmoore @Phillmoore@infosec.exchange · 5d ago

Week 32 - 2026 #DFIR https://thisweekin4n6.com/2026/08/09/week-32-2026/

Week 32 – 2026

At Triangle Wave Security we wanted to automatically hook our spreadsheet of doom into IOC feeds and sandbox results as the incident unfolded. Bulk copy-and-paste just didn’t have the juice a…

0

Phillmoore @Phillmoore@infosec.exchange · Aug 02, 2026

Week 31 - 2026 #DFIR https://thisweekin4n6.com/2026/08/02/week-31-2026/

0

Phillmoore @Phillmoore@infosec.exchange · Jul 26, 2026

Week 30 - 2026 #DFIR https://thisweekin4n6.com/2026/07/26/week-30-2026/

0

Phillmoore @Phillmoore@infosec.exchange · Jul 19, 2026

Week 29 - 2026 #DFIR https://thisweekin4n6.com/2026/07/19/week-29-2026/

0

Phillmoore @Phillmoore@infosec.exchange · Jul 12, 2026

Week 28 - 2026 #DFIR https://thisweekin4n6.com/2026/07/12/week-28-2026/

0

Phillmoore @Phillmoore@infosec.exchange · Jun 28, 2026

Week 26 - 2026 #DFIR https://thisweekin4n6.com/2026/06/28/week-26-2026/

2

0

2

0

Phillmoore @Phillmoore@infosec.exchange · Jun 21, 2026

Week 25 – 2026 #DFIR
https://thisweekin4n6.com/2026/06/21/week-25-2026

infosec.exchange

Infosec Exchange

2

0

2

0

Phillmoore @Phillmoore@infosec.exchange · Jun 14, 2026

Week 24 - 2026 #DFIR

https://thisweekin4n6.com/2026/06/14/week-24-2026/

infosec.exchange

Infosec Exchange

2

0

1

0

Phillmoore @Phillmoore@infosec.exchange · Jun 07, 2026

Week 23 - 2026 #DFIR
https://thisweekin4n6.com/2026/06/07/week-23-2026/

infosec.exchange

Infosec Exchange

2

0

2

0

Phillmoore @Phillmoore@infosec.exchange · May 31, 2026

Week 22 - 2026 #DFIR
https://thisweekin4n6.com/2026/05/31/week-22-2026/

infosec.exchange

Infosec Exchange

3

0

2

0

Phillmoore @Phillmoore@infosec.exchange · May 24, 2026

Week 21 - 2026 #DFIR
https://thisweekin4n6.com/2026/05/24/week-21-2026/

infosec.exchange

Infosec Exchange

3

0

3

0

Phillmoore @Phillmoore@infosec.exchange · May 17, 2026

Week 20 - 2026 #DFIR
https://thisweekin4n6.com/2026/05/17/week-20-2026/

infosec.exchange

Infosec Exchange

1

0

1

0

Phillmoore @Phillmoore@infosec.exchange · May 10, 2026

Week 19 - 2026 #DFIR
https://thisweekin4n6.com/2026/05/10/week-19-2026/

infosec.exchange

Infosec Exchange

2

0

2

0

Phillmoore @Phillmoore@infosec.exchange · May 03, 2026

Week 18 - 2026 #DFIR
https://thisweekin4n6.com/2026/05/03/week-18-2026/

infosec.exchange

Infosec Exchange

2

0

2

0

Phillmoore @Phillmoore@infosec.exchange · Apr 26, 2026

Week 17 - 2026 #DFIR https://thisweekin4n6.com/2026/04/26/week-17-2026/

infosec.exchange

Infosec Exchange

1

0

Phillmoore @Phillmoore@infosec.exchange · Apr 25, 2026

While doing some digging at my old job we found that sometimes Amcache might present data that isn't reflected in the PE it relates to.

We didn't figure out why this happens, but Velociraptor is the perfect tool for digging in deeper
https://thinkdfir.com/2026/04/25/trust-but-verify-amcaches-originalfilename-field-isnt-always-accurate/ #DFIR

1

2

1

0

Phillmoore @Phillmoore@infosec.exchange · Apr 24, 2026

Replying to @Ichinin@infosec.exchange

@Ichinin@infosec.exchange thanks will check it out

0

Phillmoore @Phillmoore@infosec.exchange · Apr 19, 2026

Week 16 - 2026 #DFIR

https://thisweekin4n6.com/2026/04/19/week-16-2026/

infosec.exchange

Infosec Exchange

2

0

Phillmoore @Phillmoore@infosec.exchange · Apr 12, 2026

Week 15 - 2026 #DFIR

https://thisweekin4n6.com/2026/04/12/week-15-2026/

infosec.exchange

Infosec Exchange

2

0

2

0

Phillmoore @Phillmoore@infosec.exchange · Apr 05, 2026

Week 14 - 2026 #DFIR

https://thisweekin4n6.com/2026/04/05/week-14-2026/

infosec.exchange

Infosec Exchange

1

0

Phillmoore @Phillmoore@infosec.exchange · Mar 29, 2026

Week 13 - 2026 #DFIR

https://thisweekin4n6.com/2026/03/29/week-13-2026/

infosec.exchange

Infosec Exchange

2

0

2

0

Phillmoore @Phillmoore@infosec.exchange · Mar 22, 2026

Week 12 - 2026 #DFIR
https://thisweekin4n6.com/2026/03/22/week-12-2026/

infosec.exchange

Infosec Exchange

3

0

1

0

Phillmoore @Phillmoore@infosec.exchange · Mar 15, 2026

Week 11 - 2026 #DFIR

https://thisweekin4n6.com/2026/03/15/week-11-2026/

infosec.exchange

Infosec Exchange

2

0

3

0

Phillmoore @Phillmoore@infosec.exchange · Mar 08, 2026

Week 10 - 2026 #DFIR

https://thisweekin4n6.com/2026/03/08/week-10-2026/

infosec.exchange

Infosec Exchange

3

0

2

0

Phillmoore @Phillmoore@infosec.exchange · Mar 01, 2026

Week 09 - 2026 #DFIR
https://thisweekin4n6.com/2026/03/01/week-09-2026/

infosec.exchange

Infosec Exchange

2

0

1

0

Phillmoore

Posts

Week 32 – 2026

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Infosec Exchange

Remote instance