DFIR Training @DFIRTraining
The official DFIR Training account and most complete #DFIR online resource. Managed by @Brett_Shavers. dfir.training Joined August 2016-
Tweets14K
-
Followers17K
-
Following443
-
Likes12K
🎉 The DFIR Diva x @Detegoforensics giveaway is BACK, and the prizes are better than ever! This time, THREE lucky winners will be chosen: 🎓 2 will win FREE access to Detego Global’s Digital Forensics & Cyber Crime Investigations course plus a Detego merch pack ⌚ 1 winner…
Be sure not to miss the kickoff of our brand new series, #LegalUnpacked on Oct 1! In our first episode, Justin Fitzsimmons will provide investigators and prosecutors with a practical, structured approach to drafting search warrants for digital evidence: ow.ly/ucBe50X2Vs1
#MagnetVerify is our solution for authenticating digital media files. In this blog, see how we're ensuring that even the most complex results can be communicated with clarity and confidence by combining advanced forensic rigor with automated analysis: ow.ly/TxMs50X3J6z
#MagnetOne provides your #DFIR lab with an end-to-end free case management solution that lets investigators submit requests, lab managers create cases and assign work, and examiners work and monitor their #DigitalInvestigations from start to finish: shorturl.at/sn2Vy
What challenge is common when acquiring registry data? Discover more in our article Windows Registry Forensics: Analysis Techniques at eu1.hubs.ly/H0lwDHy0
🤝Team-Friendly Setup with BelkaGPT Hub 🔹 Multiple investigators can share the same high-performance GPU hardware 🔹 A simple, scalable way to bring AI to your entire DFIR team 🔹 Stay efficient without duplicating resources 👉 Discover how it works: eu1.hubs.ly/H0nqH0t0
Week 39 - 2025 #DFIR thisweekin4n6.com/2025/09/28/wee…
We're giving promising officers a chance to advance in #DigitalForensics with the Magnet Forensics Scholarship Program. If you're currently at an agency and are looking to start or advance in a career in #DFIR, apply before Oct 16: ow.ly/OA1W50X2VQU
Be sure not to miss today's exploration of #iOS26 in our latest #MobileUnpacked! @cScottVance will talk about some of forensic implications around the changes in the newest Apple OS, including the Phone & Messages apps and more. Register here: ow.ly/amn750X1bnA #DFIR
That's a wrap on #MagnetTalksUK2025! Thank you to everyone who joined us at the amazing British Motor Museum to dive deeper into #DFIR and network with peers.
#MagnetTalksUK2025 was an amazing opportunity to explore the latest in #DFIR and Magnet Forensics solutions with 150+ valued customers at the spectacular British Motor Museum. Check out highlights from the two-day event below. Want to join us in 2026? Stay tuned for updates!
In nearly every modern investigation, #DigitalEvidence is the new DNA. Developed by experienced prosecutors, this brand new guide offers the essential knowledge needed to turn digital artifacts into compelling and reliable courtroom evidence: ow.ly/QkB650X2gr4 #DFIR
Meet Magnet Nexus’ new hybrid collection agent—one persistent, lightweight endpoint agent for Nexus and Axiom Cyber that delivers cloud speed or on-prem control, zero redeployments, and simpler remote investigations. #digitalforensics forensicfocus.com/news/magnet-fo…
On Oct 8, join us for a special episode of #CyberUnpacked where hosts Doug Metz & Jeff Rutherford will bring together a panel of #DFIR leaders to explore top challenges investigative teams face and the state of #DigitalInvestigations today: ow.ly/jRVq50X2r0L
This is a pretty incredible single threaded benchmark result from Apple with the A19. Plus it is claimed to use only 12watts. For comparison the Ultra 9 is 125W+ and EPYC 4585PX is 170W+ cpubenchmark.net/single-thread/
Remembering Kaylee Walstad ✨ Mary Mack honors Kaylee's light and legacy in Ep. 212 of Illumination Zone, featuring reflections and a heartfelt retrospective in Kaylee’s own voice. 🎧 We invite you to listen here: buff.ly/BSbQSAa #EDRM #AllAreWelcome #IlluminationZone
Time can lie. Attackers use time-stomping to alter file timestamps so malicious files look normal. Compare file metadata, logs, and registry entries—if times don’t line up, it’s a red flag. Watch the full explanation: eu1.hubs.ly/H0nmcNk0
As AI becomes central to DFIR, are we fully considering its impact? We're exploring the conversation around AI in forensics—from the 'black box' problem to investigator oversight. Read our take: eu1.hubs.ly/H0nf_nD0 #DFIR #DigitalForensics #AI #Cybersecurity
See AI that actually works for DFIR in our upcoming webinar. Join our CEO for a live demo of BelkaGPT. Find leads in massive text sets, images, and voice messages, and learn about AI's true limits and deployment challenges. Learn more: eu1.hubs.ly/H0nj0sg0 #DFIR #AI
We're happy to have had the chance to close off day 1 of #MagnetTalksUK with our Customer Appreciation Event, a wonderful opportunity to network and have fun with friends. Looking forward to another great day tomorrow!

Florian Roth ⚡️ @cyb3rops
207K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
4n6lady @4n6lady
62K Followers 669 Following #DFIR & #BlueTeam | IR & Threat Detection | #OSINT enthusiast | waiting for HL3 | AWS CIRT - my views are my own
Nicole Beckwith @NicoleBeckwith
42K Followers 7K Following Director, Security Operations @kroger 🍓 Intel, Hunting, IR, Detection Engineering, Insider Risk, Fraud & Forensics 💻 Fmr LE & DFIR for OH & Secret Service TF.
Heather Mahalik Barnh... @HeatherMahalik
23K Followers 1K Following DFIR @cellebrite, Faculty Fellow & author @sansforensics #FOR585 #FOR500, wife, mama, researcher, USAF. Trust but validate. Thoughts are mine.
DFIR Diva @DfirDiva
22K Followers 5K Following DFIR Analyst trying to learn all the things | DFIR Blog for Beginners | Founder @GetYourStart | https://t.co/7cHco4FjUS
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Kevin 🤖🕵️🍺 @KevinPagano3
3K Followers 573 Following 🕵🏼♂️ @stark4n6 🎴 Shiny cardboard collector 🍺 Resident beer drinker
Andrew Thompson @ImposeCost
39K Followers 1K Following Head of Research and Discovery (RAD) @Google Threat Intelligence Group via @Mandiant acquisition. Posts are attributable to me—not my employer. Former @USMC.
Mehmet Ergene @Cyb3rMonk
13K Followers 438 Following https://t.co/uAlYlXIpyV Learn #KQL for #ThreatHunting, #DetectionEngineering, and #DFIR @BluRavenSec | Microsoft Security MVP | #DataScience
Thomas Roccia 🤘 @fr0gger_
32K Followers 2K Following AI Security x Threat Intel · Sr. Threat Researcher @Microsoft · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @McAfee_Labs · Views mine 😈
Moose @LitMoose
38K Followers 5K Following DFIR | Violinist | Former medical/vet tech | I work for everyone and no one. Infosec retellings obfuscated. Salty and tired. Also Litmoose on BlueSky
Chad Tilbury @chadtilbury
22K Followers 600 Following Digital forensics and incident response. Ex-AFOSI, Mandiant, and CrowdStrike. SANS Institute Fellow and co-author of #FOR500 and #FOR508 courses.
Eric Capuano - Bsky: ... @eric_capuano
11K Followers 3K Following Co-Founder @recon_infosec | SANS DFIR Instructor | IANS Faculty | https://t.co/yUXCSu2Yso | ⬡ ❤ @shortxstack
Phill Moore @phillmoore
9K Followers 3K Following This Week in 4n6 // ThinkDFIR // SANS // CyberCX (DFIR) https://t.co/vLyL2sxTuy I might not know much, but I do know how to Google Tweets are mine
Grzegorz Tworek @0gtweet
36K Followers 2K Following My own research, unless stated otherwise. Not necessarily "safe when taken as directed". GIT d- s+: a+ C++++ !U !L !M w++++$ b++++ G-
Magnet Forensics @MagnetForensics
17K Followers 996 Following Official Twitter feed for Magnet Forensics, a global leader in solutions for digital investigations since 2009.
Michael Koczwara @MichalKoczwara
23K Followers 2K Following Threat Researcher/Founder @Intel_Ops_io Threat Intelligence, Adversary Infrastructure Hunting, Curated TI Feed (Coming Soon) https://t.co/VQWaze6gaF
Matt Zorich @reprise_99
14K Followers 2K Following @Microsoft Security | https://t.co/HWozKuixTi | Tweets are my own
Rizwan Aslam @RizwanAsla80000
1 Followers 60 Following
Mike @sm1ckleson
88 Followers 831 Following
Leonardo Rodrigues @leocesar1977
530 Followers 5K Following
Lalsllslsjn Aliksk @forensics_tools
0 Followers 85 Following
Vojtko Vickey @VickeyVojt43121
0 Followers 270 Following
StegoXOR @stegoxor
0 Followers 9 Following
KiTchiNotchi @kitchinotchi
54 Followers 3K Following ليس ولكم نزال فلكم ولي خسارة / لستم بي قتال ولا انا فيكم قصارة /انا السان اللهب المقاص عصارة/ نحو المساح هل قفارة / انا الصحراء لي بكم نضارة
Sursai @sur742540
0 Followers 9 Following
Cyber Expert @DefenderXpert
3 Followers 15 Following OSDA certified | Digital Forensics | Incident Response | Cyber Defense | Malware Analysis
Khaoula Hidawi @khaoula_hidawi
2K Followers 7K Following Ph.D. researcher in UAV Cybersecurity | https://t.co/m5BAny9Vvk. in Cybersecurity and Cybercrimes| (CNSS ,Fortinet NSE2, SFPC™, CCNA CyberOps, ITF+)| Wicys memb
Dennis Njoroge @_njoroge_dennis
2K Followers 6K Following Christian | Husband | Dad | Rubyist | InfoSec 🇮🇱🇺🇲🇰🇪
Matrix @OSINT_Matrix
3 Followers 136 Following
Ami_b @Ami_b
12 Followers 288 Following
Abood Abood @AAbood5859
0 Followers 11 Following
Samuel Manzunzu @ManzunzuSa82750
2 Followers 54 Following
livvy D. @livvykralova
10 Followers 76 Following
Xmoha @xmoh25
10 Followers 178 Following
AUM @A_U_M_USER
0 Followers 34 Following
CyNjaX @_CyNjaX_
1 Followers 471 Following
The Big Pol @NNA_buike
448 Followers 2K Following Pan_African//Arsenal//Humanist//Political Juggernaut
&/$;!3! @LUHDONK99
1 Followers 2K Following
Hak Chandara @sec_Littleboy
17 Followers 574 Following Figuring out how to protect networks while fueled by coffee. ☕ | Management Information Technology student & InfoSec enthusiast.
mimic mamounic @mamounic
6 Followers 790 Following
ViTweets9423 @Tweets9423Vi
3 Followers 70 Following
SkyGod @SkyGod1749062
0 Followers 120 Following
24usolad @24usolad
0 Followers 8 Following
sh0bb @sh0bb1878
4 Followers 466 Following
osama @osama49521787
2 Followers 325 Following
Toothbase @Toothbase1
0 Followers 364 Following
Aromal @redstash369
2 Followers 176 Following
King-Alwazir @AlwazirKing
2 Followers 310 Following print ('It is not your business\n Go from my profile')
Derek Bombard @DerekBomb22
36 Followers 582 Following
Pluck3dEye @pluck3deye
0 Followers 118 Following
Florian Roth ⚡️ @cyb3rops
207K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
SANS DFIR @sansforensics
109K Followers 98 Following The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.
Nicole Beckwith @NicoleBeckwith
42K Followers 7K Following Director, Security Operations @kroger 🍓 Intel, Hunting, IR, Detection Engineering, Insider Risk, Fraud & Forensics 💻 Fmr LE & DFIR for OH & Secret Service TF.
Heather Mahalik Barnh... @HeatherMahalik
23K Followers 1K Following DFIR @cellebrite, Faculty Fellow & author @sansforensics #FOR585 #FOR500, wife, mama, researcher, USAF. Trust but validate. Thoughts are mine.
DFIR Diva @DfirDiva
22K Followers 5K Following DFIR Analyst trying to learn all the things | DFIR Blog for Beginners | Founder @GetYourStart | https://t.co/7cHco4FjUS
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Kevin 🤖🕵️🍺 @KevinPagano3
3K Followers 573 Following 🕵🏼♂️ @stark4n6 🎴 Shiny cardboard collector 🍺 Resident beer drinker
Andrew Thompson @ImposeCost
39K Followers 1K Following Head of Research and Discovery (RAD) @Google Threat Intelligence Group via @Mandiant acquisition. Posts are attributable to me—not my employer. Former @USMC.
Mehmet Ergene @Cyb3rMonk
13K Followers 438 Following https://t.co/uAlYlXIpyV Learn #KQL for #ThreatHunting, #DetectionEngineering, and #DFIR @BluRavenSec | Microsoft Security MVP | #DataScience
Thomas Roccia 🤘 @fr0gger_
32K Followers 2K Following AI Security x Threat Intel · Sr. Threat Researcher @Microsoft · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @McAfee_Labs · Views mine 😈
Chad Tilbury @chadtilbury
22K Followers 600 Following Digital forensics and incident response. Ex-AFOSI, Mandiant, and CrowdStrike. SANS Institute Fellow and co-author of #FOR500 and #FOR508 courses.
Eric Capuano - Bsky: ... @eric_capuano
11K Followers 3K Following Co-Founder @recon_infosec | SANS DFIR Instructor | IANS Faculty | https://t.co/yUXCSu2Yso | ⬡ ❤ @shortxstack
Phill Moore @phillmoore
9K Followers 3K Following This Week in 4n6 // ThinkDFIR // SANS // CyberCX (DFIR) https://t.co/vLyL2sxTuy I might not know much, but I do know how to Google Tweets are mine
Magnet Forensics @MagnetForensics
17K Followers 996 Following Official Twitter feed for Magnet Forensics, a global leader in solutions for digital investigations since 2009.
Michael Koczwara @MichalKoczwara
23K Followers 2K Following Threat Researcher/Founder @Intel_Ops_io Threat Intelligence, Adversary Infrastructure Hunting, Curated TI Feed (Coming Soon) https://t.co/VQWaze6gaF
Matt Zorich @reprise_99
14K Followers 2K Following @Microsoft Security | https://t.co/HWozKuixTi | Tweets are my own
InfoSecSherpa 🏔️ @InfoSecSherpa
51K Followers 4K Following #Librarian 📚 to #InfoSec 🤖 #Philly area hoagie mouth 🥨#Ginfosec 🍸 #Everton ⚽️ Your guide up a mountain of information! 🏔️ #GoBirds
DFIRJames @DFIRJames
678 Followers 171 Following Just a dude, who does things and reads books. DFIR!
Aura @SecurityAura
6K Followers 654 Following GCIH, GCFE, GDAT | DFIR, TH, DE | @CuratedIntel DFIR https://t.co/BMWUwziTLh https://t.co/MmX2YNVqdk https://t.co/R20zseQfLk
Ray [REDACTED] @RayRedacted
64K Followers 8K Following Hacker, Researcher, Podcast Producer (Tribe of Hackers, Darknet Diaries). Proud dad of the fastest climber in the world. Ever. “Ut scandis, alios subleva”
Todd G. Shipley @WebCase
718 Followers 489 Following Author, lecturer and Internet fanatic. Dark Web explorer and researcher.
Rem @sudo_Rem
650 Followers 336 Following Senior Hunt & Response Analyst @HuntressLabs | GPEN, GCFA, GCFE, GCIA, GCIH | Python Security Researcher
Paul van Ramesdonk @van_Ramesdonk
66 Followers 383 Following DFIR, guitars, valve amps and music. No such thing as too many guitars, or too many Effects pedals.
Luciano Martins @clucianomartins
3K Followers 2K Following Researcher, Hunter, IR, Digital Forensic, Reversing, Malware Analyst, OSINT, Threat Intel, also Partner at Deloitte's Cyber Risk Services
Securityblog @Securityblog
12K Followers 14K Following There are 10 types of people in the world. Those who understand binary, and those who don't. All opinions and views are my own. #BsidesDub organizer
Gerald Auger, Ph.D. @Gerald_Auger
12K Followers 878 Following Passionate About Cybersecurity | Sharing Passion to Help Individuals Discover, Engage, and Level Up A Cyber Career | Tweets Sharing Cyber Tips, Tools, Love💙
DAY JOHNSON @ Hashico... @daycyberwox
8K Followers 1K Following Believer ✞ ͏| Cybersecurity @Amazon | Building @cyberwoxacademy
Matthew @embee_research
14K Followers 2K Following Security Researcher, Creating and Sharing Educational Content.
Adam Firman @MSAB_Adam
74 Followers 162 Following Tech Evangelist for @MSAB_XRY - talks all things #DFIR #MobileForensics #lawenforcement
scottamoulton @scottamoulton
2K Followers 635 Following Digital Forensic Expert and wrote the Forensic Hard Drive Data Recovery Course as well as Distance Learning for Data Recovery.
Chuong Dong @cPeterr
5K Followers 705 Following MSTIC RE @Microsoft | Ex FLARE RE @Mandiant | @CuratedIntel
Pavel Yosifovich @zodiacon
14K Followers 917 Following Windows Internals expert, author, and trainer. Teaching system programming & debugging at TrainSec. Check out my books & courses! 🚀 #WindowsInternals #TrainSec
Uriel Kosayev @MalFuzzer
5K Followers 435 Following Author of MAoS - Malware Analysis on Steroids & Antivirus Bypass Techniques | Cybersecurity Researcher | Keynote Speaker | Co-Founder @TrainSec Academy
Eliza-May Austin @Eliza_MayAustin
5K Followers 3K Following CEO of @th4ts3cur1ty.company & @PocketSIEM_ #CyberSecurity #infosec #siem #purpleteam #ThoughtCriminal 🏴🇬🇧
InfoSec Community @InfoSecComm
52K Followers 635 Following Largest InfoSec publication with 62,000+ followers and 1M+ monthly views.
Simson Garfinkel @xchatty
2K Followers 2K Following Computer scientist & journalist, specializing in AI, privacy, ethics, big data, usability and security. My opinions here. ORCID 0000-0003-1294-2831
EDRM - The Electronic... @edrm
3K Followers 2K Following Empowering the global leaders of eDiscovery, the EDRM creates practical resources to improve eDiscovery, privacy, security and information governance.
Carl Lawrence @MSAB_Carl
846 Followers 3K Following
Alberto Daniel Hill �... @ADanielHill
48K Followers 18K Following First #HACKER wrongfully sent to #PRISON in #URUGUAY, @darknetdiaries episode 25 - I changed the justice system in Latin America. Post-Traumatic Growth.
cje @caseyjohnellis
29K Followers 4K Following troublemaker & troubleshooter | founder @bugcrowd @disclose_io, board advisor, investor | pioneer of #bugbounty as-a-service | opinions CC0 1.0 | #hacktheplanet
Matt Bromiley (🇺�... @_bromiley
7K Followers 1K Following Lead Solutions Engineer @ LimaCharlie, BlackHat Instructor, SANS Analyst/Instructor, Security Researcher. Cybersecurity mentor.
🎙Cyber Distortion ... @DistortionCyber
2K Followers 2K Following The Cyber Distortion Podcast covers all of today's relevant topics related to anything and everything in the world of Cybersecurity. Our opinions are our own!
Paul Lorentz aka Scur... @PaulScurvy
809 Followers 884 Following Dad of 3, 🚲 , 🎣 , 🏃♂️ and love the outdoors and bit of 4n6, former🇨🇦🚔 @ottawapolice, now @Cellebrite Head of Customer Engagement. Opinions are my own
Monolith Forensics @Monolith4n6
128 Followers 28 Following Case, evidence, and lab management software for digital forensics labs and teams.
Jean-Philippe NOAT @4n6s_mc
621 Followers 1K Following Clb enthousiast, #DFIR passion, International judicial expert comments reflect my own opinion
Debbie Garner @garNERDeb
617 Followers 2K Following Retired law enforcement executive and former ICAC Commander turned technology advocate talking about #lawenforcement #dfir #ICAC and Atlanta sports!
James McGee @SQL_McGee
290 Followers 88 Following Husband || Father || Digital Forensic Examiner || Cyber Crime Investigator || SQL Query Fanatic || Sometimes I make NFTs of my Dog
Digital Detective @DigitalDetectiv
3K Followers 363 Following Ex-law enforcement with a passion for developing innovative digital forensic solutions to help solve crimes. Established 2001.
𝚃𝚊𝚌𝚝𝚒�... @OSINT_Tactical
19K Followers 2K Following 🥇2024 NMP Hackathon 1st place | 3x @Tracelabs Gold Badge 🥇| 3x Silver Badge 🥈 | 1x Bronze Badge 🥉| https://t.co/z76OiEDpYO
Brandon Leatha @brandonleatha
50 Followers 265 Following eDiscovery, digital forensics, investigations, and some other stuff having to do with data......
Ulf Frisk @UlfFrisk
8K Followers 981 Following IT-Security Minion | https://t.co/N1gIUL5rKc | https://t.co/XbBOnQPYoK | DMA | PCILeech | MemProcFS
J⩜⃝mie Williams @jamieantisocial
10K Followers 7K Following threats && stuff || #UNC1799 forever 🤘|| @DistrictHeather ♥️ + 🍷 **𝚅𝚒𝚎𝚠𝚜 𝚎𝚡𝚙𝚛𝚎𝚜𝚜𝚎𝚍 𝚊𝚛𝚎 𝚖𝚈 օ𝚠𝚗**
Dray Agha @Purp1eW0lf
6K Followers 3K Following Hunt & Response Senior Manager @HuntressLabs || "Competition is the law of the jungle, but cooperation is the law of civilisation” - Kropotkin
Ushi @ush1c
16K Followers 8K Following Mumblings of a perpetual n00b| Xoogler/mandiant| #Hacker @binaryhansolo == ❤️| mama of THE amazing #actuallyautistic Bubbs| @infosecwhiskey @hackerhaussec
Nikhith @Nikhith_
2K Followers 926 Following Incident Response guy | Ex-Threat Hunter @Microsoft | Ex-Red Team @Mandiant | RCE || GTFO | 🪂 Paragliding P2 Pilot | 🤿 Scuba EXP30
Andrea Lazzarotto @thelazza
1K Followers 235 Following Computer scientist, #DigitalForensics consultant, Software developer, Speaker. Creator of RecuperaBit and Fuji. #Linux #InfoSec #DFIR
Josh++ @josh_murchie
882 Followers 711 Following Senior Threat Analyst @Google | Threat Hunter | Digital Forensicator | Coffee Addict | Bourbon Enthusiast | Amateur Woodworker | Unapologetically Pro 2A
Taz Wake @tazwake
9K Followers 6K Following #DFIR #ThreatHunting | @SANSInstitute instructor | SANS Course Author | CISSP (etc) holder | https://t.co/00tACAnVLd | Rarely used account.
corgi @corg_e
54K Followers 3K Following ssh'd into the espresso machine | (mostly) harmless pentester | president @bsidesnash | @defcon615 | chaotic neutral
Steve Ragan ⚠️ @SteveD3
15K Followers 3K Following Father. Grandpa. Geek. Hacker. Former journalist. Security researcher. CMO @BSidesLV. Member: @CuratedIntel | BOD @CircleCityCon (RIP). | Tweets are my own.