Category Archives: Forensic Analysis

The Alexiou Principle

Posted on by

I very rarely republish content of other blogs, but today, for many reasons really, I feel obliged to republish one of the most relevant DFIR posts ever: The Alexiou Principle by Chris Pogue.

The 4 questions that form The Alexiou Principle are absolutely perfect:

  1. What question are you trying to answer?
  2. What data do you need to answer that question?
  3. How do you extract that data?
  4. What does that data tell you?

If you are starting your DFIR journey, or are a seasoned DFIR professional these questions will remain a mantra that you will follow, one way or another.

Embrace them.

Updated 3R (RegRipper Ripper) (RR v3.0)

Posted on by

Another 2 years passed since last update of the 3R and since there is a new release of Regripper this week (https://github.com/keydet89/RegRipper3.0) it was a good opportunity to revisit it.

The update this time was a bit tricky — since the snapshots (2.8 vs. 3.0) differ a lot, I decided to get 2.8 as a base, and then add/overwrite changes from v3.0.

And last, but not least – remember of 3RPG tool!