DEV Community

#dfir

Digital Forensics and Incident Response procedures, tools, and case studies.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Outlook Zero-Day CVE-2026-124194: Opening a Message File Can Hand Over Your Windows Login

Outlook Zero-Day CVE-2026-124194: Opening a Message File Can Hand Over Your Windows Login

Comments
4 min read
Apache HTTP/2 RCE (CVE-2026-119618): A 9.8 You Can Rule Out in One Check

Apache HTTP/2 RCE (CVE-2026-119618): A 9.8 You Can Rule Out in One Check

Comments
4 min read
SSHole (CVE-2026-123158): A 257-Byte Password Logs Into Alpine Accounts With No Password

SSHole (CVE-2026-123158): A 257-Byte Password Logs Into Alpine Accounts With No Password

Comments
4 min read
The boring state of stalled timelines…

The boring state of stalled timelines…

Comments
1 min read
Why I Built My Cloud-Native DFIR Pipeline (And Ditched AWS/OpenSearch for BigQuery)

Why I Built My Cloud-Native DFIR Pipeline (And Ditched AWS/OpenSearch for BigQuery)

Comments
2 min read
agent-trace-witness v0.1.0: signed readiness seal, post-execution capture, and PROV-DM causal graphs for autonomous AI agents

agent-trace-witness v0.1.0: signed readiness seal, post-execution capture, and PROV-DM causal graphs for autonomous AI agents

5
Comments
8 min read
High-Throughput Linux Audit Logging with Vector & ClickHouse DFIR Pipeline

High-Throughput Linux Audit Logging with Vector & ClickHouse DFIR Pipeline

Comments
4 min read
When Your AI Agent Gets Breached, Can You Prove What It Did?

When Your AI Agent Gets Breached, Can You Prove What It Did?

Comments 2
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.