DFIR Training @DFIRTraining
The official DFIR Training account and most complete #DFIR online resource. Managed by @Brett_Shavers. dfir.training Joined August 2016-
Tweets14K
-
Followers17K
-
Following495
-
Likes12K
🚨 500+ downloads on a single DFIR policy. If your team doesn’t have one, you’re already behind. 👉 Get the policies the rest of #DFIR is using
Different viewpoints from different people make better #DFIR practitioners.
The next Techno Security & Digital Forensics Conference is taking place October 27th - 29th in San Diego, CA. Session topics include Digital Forensics, eDiscovery, OSINT and more! Use promo code DFDV25 for a 10% discount. #DFIR #DigitalForensics #IncidentResponse #OSINT…
Registry Secrets: How Malware Stays Hidden in Windows youtu.be/SlKwxTJZ4ro?fe… via @Belkasoft
In this blog, learn more about how we're helping turn the vision of #DigitalForensics and intelligence working together into reality. How we're helping cases move faster with stronger evidence and efficiently used resources: ow.ly/EWT350WPFMC #DFIR
We're proud to be a Gold sponsor for @technosecurity in San Diego on Oct 27-29! If you're attending, use the code MAG25 to receive a 10% discount on current registration rates*: technosecurity.us/west *Additional discounts are not valid on the already reduced Government rates.
We're proud to be a sponsor of the #NordicCyberSummit, taking place in Copenhagen on Sept 10-11! Thinking of attending? For VIP access, register here and use the code "MAGNET": nordic.cyberseries.io
Last month, we hosted our #MagnetTalks in New Delhi, India with our partner 3rd Eye Techno Solutions Private Limited. This exclusive session focused on how automation is transforming #DigitalInvestigations in the public sector. Thank you to all those who joined us!
A clean disk scan can be deceiving. Attackers hide fileless malware in the Registry by splitting encrypted payloads to run from memory, evading standard tools. Spotting it requires custom scripts. 🎥 Watch the full segment: eu1.hubs.ly/H0mPRQX0
Prior to joining us as a prosecutorial expert, Justin Fitzsimmons used our products in his role as Assistant State’s Attorney in Lake County, IL. Hear from Justin about how effective prosecution hinges on the ability to present compelling #DigitalEvidence that demonstrates guilt.
Sharpen your SQLite forensics skills with Belkasoft’s on-demand course. Practice with real data, validate DFIR tool extractions & earn 6 CPE credits. Register before September 30: eu1.hubs.ly/H0mMX_Q0
New DFIR Research: Chris Ray’s comprehensive list of LogMeIn artifacts ⤵ → Windows events → Registry keys → Exe names → Domains → Log files → Folders Right here: cybertriage.com/blog/dfir-next… P.S. Share this post to help other DFIR pros!
Red Teaming only works if you’re ready for it. This free Red Team Readiness Guide helps you align stakeholders, clarify goals, and avoid planning pitfalls. Get it here → bfx.social/3JE8cFR
Book Now!!! We got options BSidesRDU 2025 Friday, Sep 12, 2025 at 8:30 AM to 6:00 PM EDT $55.00 and Free Parking bsidesrdu.org/#hotels
Keeping track of #DFIR webinars so you don't have to. dfir.training
Looking for #DFIR tool training courses? Type in the tool and find it. Or maybe a specific training org, location, or webinar? Same thing. One search box rules them all.
Looking for #DFIR tool training courses? Type in the tool and find it. Or maybe a specific training org, location, or webinar? Same thing. One search box rules them all. https://t.co/wnh92Ujude
Don't get mad if your course isn't listed. Just send me the URL and I'll add it.
Don't get mad if your course isn't listed. Just send me the URL and I'll add it.

Florian Roth ⚡️ @cyb3rops
206K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Ali Hadi | B!n@ry @binaryz0ne
33K Followers 565 Following DFIR and Adversary Simulation | DFIR @ ProtonMail
4n6lady @4n6lady
62K Followers 669 Following #DFIR & #BlueTeam | IR & Threat Detection | #OSINT enthusiast | waiting for HL3 | AWS CIRT - my views are my own
Nicole Beckwith @NicoleBeckwith
42K Followers 7K Following Director, Security Operations @kroger 🍓 Intel, Hunting, IR, Detection Engineering, Insider Risk, Fraud & Forensics 💻 Fmr LE & DFIR for OH & Secret Service TF.
Heather Mahalik Barnh... @HeatherMahalik
23K Followers 1K Following DFIR @cellebrite, Faculty Fellow & author @sansforensics #FOR585 #FOR500, wife, mama, researcher, USAF. Trust but validate. Thoughts are mine.
DFIR Diva @DfirDiva
21K Followers 5K Following DFIR Analyst trying to learn all the things | DFIR Blog for Beginners | Founder @GetYourStart | https://t.co/7cHco4FjUS
Brett Shavers 🙄 @Brett_Shavers
40K Followers 1K Following Fell off a cliff. Swam with sharks. Dined with hitmen. Hung out with crime bosses. Bought and sold a ton of drugs. How the heck am I still here? #DFIR #USMC 🚓
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Kevin 🤖🕵️🍺 @KevinPagano3
3K Followers 570 Following 🕵🏼♂️ @stark4n6 🎴 Shiny cardboard collector 🍺 Resident beer drinker
Andrew Thompson @ImposeCost
39K Followers 1K Following Head of Research and Discovery (RAD) @Google Threat Intelligence Group via @Mandiant acquisition. Posts are attributable to me—not my employer. Former @USMC.
Mehmet Ergene @Cyb3rMonk
13K Followers 437 Following https://t.co/uAlYlXIpyV Learn #KQL for #ThreatHunting, #DetectionEngineering, and #DFIR @BluRavenSec | Microsoft Security MVP | #DataScience
Thomas Roccia 🤘 @fr0gger_
31K Followers 2K Following AI Security x Threat Intel · Sr. Threat Researcher @Microsoft · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @McAfee_Labs · Views mine 😈
Moose @LitMoose
38K Followers 5K Following DFIR | Violinist | Former medical/vet tech | I work for everyone and no one. Infosec retellings obfuscated. Salty and tired. Also Litmoose on BlueSky
Chad Tilbury @chadtilbury
22K Followers 600 Following Digital forensics and incident response. Ex-AFOSI, Mandiant, and CrowdStrike. SANS Institute Fellow and co-author of #FOR500 and #FOR508 courses.
Eric Capuano - Bsky: ... @eric_capuano
11K Followers 3K Following Co-Founder @recon_infosec | SANS DFIR Instructor | IANS Faculty | https://t.co/yUXCSu2Yso | ⬡ ❤ @shortxstack
Phill Moore @phillmoore
9K Followers 3K Following This Week in 4n6 // ThinkDFIR // SANS // CyberCX (DFIR) https://t.co/vLyL2sxTuy I might not know much, but I do know how to Google Tweets are mine
Grzegorz Tworek @0gtweet
36K Followers 2K Following My own research, unless stated otherwise. Not necessarily "safe when taken as directed". GIT d- s+: a+ C++++ !U !L !M w++++$ b++++ G-
Magnet Forensics @MagnetForensics
17K Followers 998 Following Official Twitter feed for Magnet Forensics, a global leader in solutions for digital investigations since 2009.
Michael Koczwara @MichalKoczwara
23K Followers 2K Following Threat Researcher/Founder @Intel_Ops_io Threat Intelligence, Adversary Infrastructure Hunting, Curated TI Feed (Coming Soon) https://t.co/VQWaze6gaF
EmmaNuel Billa @NuelBilla
262 Followers 598 Following Forensics, cybersecurity enthusiast, volunteer, food lover 😋
Qanon @qanonfree
0 Followers 4K Following
zareef @AffaniMZ
2 Followers 95 Following
Ygtgs @yigitmrtgs
100 Followers 227 Following
Dinohacks @nhegde610
545 Followers 2K Following Researcher. Malware Analyst. Part time threat hunter. Part time blogger
Sunny singh @sunnysitechie
272 Followers 4K Following
jonald @lightkun_yagami
112 Followers 374 Following Airman at the Utah Air National Guard, and a Cyber Security enthusiast.
Michele Ferrato @MicheleFerrato
20 Followers 591 Following
Yraulu @Yraulu0320
7 Followers 245 Following
Mustafa Çağrı ÇAL... @gokaycagri
43 Followers 215 Following
jackalek @jackalek
127 Followers 4K Following
Shriya Pandey @forensicshriya
1 Followers 34 Following
progz @prog2cyber
7 Followers 228 Following
Termocall @Termocall
73 Followers 1K Following
CW @iamcybher
252 Followers 227 Following Refined || Vending Machines Owner & Cybersecurity Moves || Threat Hunter & Research || Grad Student +_+ she:her 🏳️🌈
RAJ @Raj4446K
1 Followers 138 Following
Cyber World Infosec @CyberWorldInfos
2 Followers 33 Following Cyber World Infosec – Defining the future of digital security.
Jared Burr @JaredBurr
187 Followers 3K Following Proud husband and father of 5. Opinions are my own and not the views of my employer.
MargueriteEva @2k1Kai9457L42
98 Followers 4K Following
HedyJimmy @v8hunlHvx0ZW9
2 Followers 116 Following
the square doesn't fi... @PureYorozuya
22 Followers 452 Following We work in the dark, to serve the light, Yoruzuya, BKAK , Slamdunk , Only Lucas Wong , Warriors , Magic
Naveen Kumar @the_realNaveen
203 Followers 7K Following
Maestran @ma3stran
54 Followers 900 Following
Ondřej Šrámek @sramek_o
405 Followers 2K Following Analyst | Lecturer || Former https://t.co/k6oRyd0xh8, NSGBU SOC, SME PwC CZ, DBG CERT
Ketan Upadhyay @K10here
2 Followers 217 Following
𝙽𝙴𝚃𝚁𝙴�... @netresec
9K Followers 815 Following Experts in Network Forensics and Network Security Monitoring. Creators of #NetworkMiner, #CapLoader, #PacketCache, #PolarProxy and #RawCap.
deaddisk @dead_disk
7 Followers 86 Following
Gaurav Kumar @GauravKuma95737
7 Followers 491 Following
leo chuquiguanca @lrafael696
425 Followers 595 Following Cybersecurity Research | Digital Forensic | Cybercrime Investigator | Free-software activist | BSC | Heavy Metal
aleksander @MerlinAlex666
70 Followers 659 Following
CyberID10T @stonej09
28 Followers 567 Following
Zangeen America @Zangeenamerica
4 Followers 33 Following seeking to study (STEM) in America -Email:[email protected] god bless America🇺🇸 god bless @anasebraheem I seek mentorship
Jake @jake_olesen
1 Followers 88 Following
The OSINT Archive @theOSINTarchive
166 Followers 2K Following A collaborative project dedicated to building a comprehensive collection on #OSINT tools & techniques, #MachineLearning, #DataAnalysis, and #InformationSecurity
Mathew Musango @MathewMusango
18 Followers 2K Following
nagoona @xiangg9629
1 Followers 68 Following
TWPro_RandomX @TwproR80891
0 Followers 91 Following
Florian Roth ⚡️ @cyb3rops
206K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Ali Hadi | B!n@ry @binaryz0ne
33K Followers 565 Following DFIR and Adversary Simulation | DFIR @ ProtonMail
4n6lady @4n6lady
62K Followers 669 Following #DFIR & #BlueTeam | IR & Threat Detection | #OSINT enthusiast | waiting for HL3 | AWS CIRT - my views are my own
SANS DFIR @sansforensics
109K Followers 98 Following The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.
Nicole Beckwith @NicoleBeckwith
42K Followers 7K Following Director, Security Operations @kroger 🍓 Intel, Hunting, IR, Detection Engineering, Insider Risk, Fraud & Forensics 💻 Fmr LE & DFIR for OH & Secret Service TF.
Heather Mahalik Barnh... @HeatherMahalik
23K Followers 1K Following DFIR @cellebrite, Faculty Fellow & author @sansforensics #FOR585 #FOR500, wife, mama, researcher, USAF. Trust but validate. Thoughts are mine.
DFIR Diva @DfirDiva
21K Followers 5K Following DFIR Analyst trying to learn all the things | DFIR Blog for Beginners | Founder @GetYourStart | https://t.co/7cHco4FjUS
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Kevin 🤖🕵️🍺 @KevinPagano3
3K Followers 570 Following 🕵🏼♂️ @stark4n6 🎴 Shiny cardboard collector 🍺 Resident beer drinker
Andrew Thompson @ImposeCost
39K Followers 1K Following Head of Research and Discovery (RAD) @Google Threat Intelligence Group via @Mandiant acquisition. Posts are attributable to me—not my employer. Former @USMC.
Mehmet Ergene @Cyb3rMonk
13K Followers 437 Following https://t.co/uAlYlXIpyV Learn #KQL for #ThreatHunting, #DetectionEngineering, and #DFIR @BluRavenSec | Microsoft Security MVP | #DataScience
Thomas Roccia 🤘 @fr0gger_
31K Followers 2K Following AI Security x Threat Intel · Sr. Threat Researcher @Microsoft · Creator of #Unprotect & #NOVA · Malware Warlock · Python 🧡 · Prev @McAfee_Labs · Views mine 😈
Chad Tilbury @chadtilbury
22K Followers 600 Following Digital forensics and incident response. Ex-AFOSI, Mandiant, and CrowdStrike. SANS Institute Fellow and co-author of #FOR500 and #FOR508 courses.
Eric Capuano - Bsky: ... @eric_capuano
11K Followers 3K Following Co-Founder @recon_infosec | SANS DFIR Instructor | IANS Faculty | https://t.co/yUXCSu2Yso | ⬡ ❤ @shortxstack
Phill Moore @phillmoore
9K Followers 3K Following This Week in 4n6 // ThinkDFIR // SANS // CyberCX (DFIR) https://t.co/vLyL2sxTuy I might not know much, but I do know how to Google Tweets are mine
Magnet Forensics @MagnetForensics
17K Followers 998 Following Official Twitter feed for Magnet Forensics, a global leader in solutions for digital investigations since 2009.
Michael Koczwara @MichalKoczwara
23K Followers 2K Following Threat Researcher/Founder @Intel_Ops_io Threat Intelligence, Adversary Infrastructure Hunting, Curated TI Feed (Coming Soon) https://t.co/VQWaze6gaF
Matt Zorich @reprise_99
14K Followers 2K Following @Microsoft Security | https://t.co/HWozKuixTi | Tweets are my own
InfoSecSherpa 🏔️ @InfoSecSherpa
51K Followers 4K Following #Librarian 📚 to #InfoSec 🤖 #Philly area hoagie mouth 🥨#Ginfosec 🍸 #Everton ⚽️ Your guide up a mountain of information! 🏔️ #GoBirds
DFIRJames @DFIRJames
660 Followers 165 Following Just a dude, who does things and reads books. DFIR!
Aura @SecurityAura
6K Followers 651 Following GCIH, GCFE, GDAT | DFIR, TH, DE | @CuratedIntel DFIR https://t.co/BMWUwziTLh https://t.co/MmX2YNVqdk https://t.co/R20zseQfLk
Bitdefender @Bitdefender
114K Followers 3K Following Award-winning cybersecurity you can trust and rely on.
Ray [REDACTED] @RayRedacted
67K Followers 8K Following Hacker, Researcher, Podcast Producer (Tribe of Hackers, Darknet Diaries). Proud dad of the fastest climber in the world. Ever. “Ut scandis, alios subleva”
Todd G. Shipley @WebCase
719 Followers 488 Following Author, lecturer and Internet fanatic. Dark Web explorer and researcher.
Rem @sudo_Rem
605 Followers 324 Following Senior Hunt & Response Analyst @HuntressLabs | GPEN, GCFA, GCFE, GCIA, GCIH | Python Security Researcher
Gina1 @ginalm2112
867 Followers 2K Following Cybersecurity CFO. Interest in Weather, Space, Science/Physics, Storm Spotting, LE, OSINT, Gardening, Soil, Farming
Paul van Ramesdonk @van_Ramesdonk
65 Followers 377 Following DFIR, guitars, valve amps and music. No such thing as too many guitars, or too many Effects pedals.
Luciano Martins @clucianomartins
3K Followers 2K Following Researcher, Hunter, IR, Digital Forensic, Reversing, Malware Analyst, OSINT, Threat Intel, also Partner at Deloitte's Cyber Risk Services
Securityblog @Securityblog
12K Followers 14K Following There are 10 types of people in the world. Those who understand binary, and those who don't. All opinions and views are my own. #BsidesDub organizer
Gerald Auger, Ph.D. @Gerald_Auger
12K Followers 880 Following Passionate About Cybersecurity | Sharing Passion to Help Individuals Discover, Engage, and Level Up A Cyber Career | Tweets Sharing Cyber Tips, Tools, Love💙
DAY JOHNSON ⚡️ @daycyberwox
8K Followers 1K Following Believer ✞ ͏| Cybersecurity @Amazon | Building @cyberwox @cyberwoxacademy
Matthew @embee_research
14K Followers 2K Following Security Researcher, Creating and Sharing Educational Content.
Adam Firman @MSAB_Adam
75 Followers 162 Following Tech Evangelist for @MSAB_XRY - talks all things #DFIR #MobileForensics #lawenforcement
scottamoulton @scottamoulton
2K Followers 635 Following Digital Forensic Expert and wrote the Forensic Hard Drive Data Recovery Course as well as Distance Learning for Data Recovery.
Chuong Dong @cPeterr
5K Followers 702 Following MSTIC RE @Microsoft | Ex FLARE RE @Mandiant | @CuratedIntel
BigMamasArm @sadies_page
16K Followers 1K Following Engineer 🤓 Skill stacking 💰 In the gym🏋🏾♀️ Paid content has ruined this app⚠️
Pavel Yosifovich @zodiacon
14K Followers 916 Following Windows Internals expert, author, and trainer. Teaching system programming & debugging at TrainSec. Check out my books & courses! 🚀 #WindowsInternals #TrainSec
Uriel Kosayev @MalFuzzer
5K Followers 434 Following Author of MAoS & Antivirus Bypass Techniques | Cybersecurity Researcher | Keynote Speaker | Co-Founder @TrainSec Academy
Eliza-May Austin @Eliza_MayAustin
5K Followers 3K Following CEO of @th4ts3cur1ty.company & @PocketSIEM_ #CyberSecurity #infosec #siem #purpleteam #ThoughtCriminal 🏴🇬🇧
InfoSec Community @InfoSecComm
52K Followers 636 Following Largest InfoSec publication with 62,000+ followers and 1M+ monthly views.
Simson Garfinkel @xchatty
2K Followers 2K Following Computer scientist & journalist, specializing in AI, privacy, ethics, big data, usability and security. My opinions here. ORCID 0000-0003-1294-2831
EDRM - The Electronic... @edrm
3K Followers 2K Following Empowering the global leaders of eDiscovery, the EDRM creates practical resources to improve eDiscovery, privacy, security and information governance.
Carl Lawrence @MSAB_Carl
846 Followers 3K Following
Alberto Daniel Hill �... @ADanielHill
48K Followers 18K Following First #HACKER wrongfully sent to #PRISON in #URUGUAY, @darknetdiaries episode 25 - I changed the justice system in Latin America. Post-Traumatic Growth.
cje @caseyjohnellis
29K Followers 4K Following troublemaker & troubleshooter | founder @bugcrowd @disclose_io, board advisor, investor | pioneer of #bugbounty as-a-service | opinions CC0 1.0 | #hacktheplanet
Matt Bromiley (🇺�... @_bromiley
7K Followers 1K Following Lead Solutions Engineer @ LimaCharlie, BlackHat Instructor, SANS Analyst/Instructor, Security Researcher. Cybersecurity mentor.
🎙Cyber Distortion ... @DistortionCyber
2K Followers 2K Following The Cyber Distortion Podcast covers all of today's relevant topics related to anything and everything in the world of Cybersecurity. Our opinions are our own!
Paul Lorentz aka Scur... @PaulScurvy
810 Followers 883 Following Dad of 3, 🚲 , 🎣 , 🏃♂️ and love the outdoors and bit of 4n6, former🇨🇦🚔 @ottawapolice, now @Cellebrite Head of Customer Engagement. Opinions are my own
Monolith Forensics @Monolith4n6
130 Followers 28 Following Case, evidence, and lab management software for digital forensics labs and teams.
USCyberGames @USCyberGames
2K Followers 220 Following Bringing together top #cybersecurity athletes, coaches, & industry leaders to build a #USCyberTeam for global competition. Reston, VA
BSidesRDU @BSidesRDU
2K Followers 2K Following BSides RDU 2025: 9/12/25 @ NCSU McKimmon Center https://t.co/1oFdFTBaMl
Jared Wilson @JWilsonSecurity
2K Followers 1K Following Mandiant Research and Discovery, Father, Husband, Trail Runner, Co-Founder CyberFriendsCircle
CackalackyCon @cackalackycon
3K Followers 3K Following Technology Conference / HackerCon in Raleigh, NC May 16-18, 2025
Ricky Johnson @johnson0844
289 Followers 533 Following 🇺🇸 | 🐔| 📱4n6 | DFIR guy | Avid Gamecocks fan | Team RCSD
Jean-Philippe NOAT @4n6s_mc
621 Followers 1K Following Clb enthousiast, #DFIR passion, International judicial expert comments reflect my own opinion
Debbie Garner @garNERDeb
617 Followers 2K Following Retired law enforcement executive and former ICAC Commander turned technology advocate talking about #lawenforcement #dfir #ICAC and Atlanta sports!
Troy Schnack @TheBaldJedi
335 Followers 401 Following #Golf, #SyFy, #Science, #Forensics #AI #Scripting #SysAdmin "The true sign of maturity is not caring what other people think."
James McGee @SQL_McGee
286 Followers 88 Following Husband || Father || Digital Forensic Examiner || Cyber Crime Investigator || SQL Query Fanatic || Sometimes I make NFTs of my Dog
Digital Detective @DigitalDetectiv
3K Followers 360 Following Ex-law enforcement with a passion for developing innovative digital forensic solutions to help solve crimes. Established 2001.
𝚃𝚊𝚌𝚝𝚒�... @OSINT_Tactical
19K Followers 2K Following 🥇2024 NMP Hackathon 1st place | 3x @Tracelabs Gold Badge 🥇| 3x Silver Badge 🥈 | 1x Bronze Badge 🥉| https://t.co/z76OiEDpYO
Brandon Leatha @brandonleatha
49 Followers 265 Following eDiscovery, digital forensics, investigations, and some other stuff having to do with data......
Ulf Frisk @UlfFrisk
8K Followers 981 Following IT-Security Minion | https://t.co/N1gIUL5rKc | https://t.co/XbBOnQPYoK | DMA | PCILeech | MemProcFS
J⩜⃝mie Williams @jamieantisocial
10K Followers 7K Following threats && stuff || #UNC1799 forever 🤘|| @DistrictHeather ♥️ + 🍷 **𝚅𝚒𝚎𝚠𝚜 𝚎𝚡𝚙𝚛𝚎𝚜𝚜𝚎𝚍 𝚊𝚛𝚎 𝚖𝚈 օ𝚠𝚗**