PowerShell Function Basics and Recursion

2026-09-28 #powershell #programming-basics #recursion

## Defining a Function ```powershell function Get-Factorial { param([int]$n) if ($n -le 1) { return 1 } return $n * (Get-Factorial -n ($n - 1)) } Get-Factorial -n 5 …

Writing Python Functions and Recursion Basics

2026-09-26 #python #programming-basics #recursion #digital-forensics #scripting

# Writing Python Functions and Recursion Basics ## Defining a simple function A function packages reusable logic under a name. You define it with `def`, give it parameters, and …

WinDbg Patching Arguments at Runtime

2026-09-22 #understanding-assembly-via-examples #winDbg #debugging #x86 #reverse-engineering

# WinDbg Patching Arguments at Runtime When a function is about to receive a bad argument (e.g. `NULL` filename passed to `__loaddll`), you can fix the pointer value on [[Stack F…

Active Recall

2026-09-22 #learning #memory #study-techniques

Active recall is a learning technique that involves actively testing yourself on material rather than passively re-reading. It is closely related to [[Spaced Repetition]] and [[Le…

Sync test note

2026-09-20 #test

Testing self-hosted git sync.

Spaced Repetition

2026-09-20 #learning #memory #study-techniques

Spaced repetition is a learning technique where you review information at strategically increasing intervals over time. Instead of cramming, you revisit material just as you're ab…

The 5 Principles of Digital Forensics

2026-09-20 #forensics #digital forensics #incident response #security #principles

# The 5 Principles of Digital Forensics 1. **Lawfulness** All evidence must be collected legally and ethically. Unauthorized access or unlawful searches can render evidence in…

Core Principles of Forensic Science

2026-09-20 #forensics #digital forensics #principles #Locard's Exchange Principle #evidence

# Core Principles of Forensic Science These principles form the philosophical foundation of all forensic disciplines—physical, biological, and digital. They explain *why* evidenc…

Synthesis: Core Forensic Principles in Practice

2026-09-20 #forensics #digital-forensics #principles #synthesis #objectivity #probability #investigative-method #learning

# Synthesis: Core Forensic Principles in Practice Today's session connected the foundational **[[Core Principles of Forensic Science]]** with the procedural **[[The 5 Principles …

Evidence Acquisition Fundamentals

2026-09-20 #forensics #acquisition #hashing #chain-of-custody #imaging #write-blocking #evidence-preservation

# Evidence Acquisition Fundamentals Acquisition is the bridge between the *existence* of a digital trace and its *usability* as evidence. It is where the philosophical principles…

Test Node Alpha

2026-09-20 #test #debug #wikilink

This is a test note for debugging wikilink functionality. It contains a link to [[Test Node Beta]]. Created for bug-fixing purposes.

Test Node Beta

2026-09-20 #test #debug #wikilink

This is a second test note for debugging wikilink functionality. It contains a link back to [[Test Node Alpha]]. Created for bug-fixing purposes.

Regex Fundamentals

2026-09-20 #regex #digital-forensics #log-analysis #burp-suite #syntax

# Regex Fundamentals A foundational reference for regex syntax, with emphasis on practical application in digital forensics, log analysis, and tooling like [[Burp Suite]]. ## 1.…

Convergent vs Divergent Thinking

2026-09-20 #thinking #problem-solving #forensics #learning #cognition

## Convergent vs. Divergent Thinking These two complementary modes of thinking describe how we approach problems and process information. ### Divergent Thinking - **Definition**…

PowerShell as an Acquisition Engine

2026-09-20 #powershell #acquisition #digital-forensics #incident-response #cmdlets #python

# PowerShell as an Acquisition Engine PowerShell is described in Hosmer's book as a powerful **acquisition engine** for digital investigations. Its role is to gather raw informat…

PowerShell Cross-Platform

2026-09-20 #powershell #cross-platform #linux #macos #dotnet-core #digital-forensics

# PowerShell Cross-Platform PowerShell was originally **Windows-only** because it was built on the .NET Framework. In 2016, Microsoft open-sourced PowerShell and rebuilt it on .N…

Experimenting with PowerShell

2026-09-20 #powershell #powershell-ise #windows #cmdlet #learning #digital-investigation

PowerShell is typically preinstalled on modern Windows desktop and server platforms. If it is not present, you can download and install it by searching for **Windows Management Fr…

PowerShell ISE Panels

2026-09-20 #powershell #powershell-ise #digital-forensics #cmdlet #chet-hosmer-powershell-and-python-together_-targeting-digital-investigations-apress-2019 #ch01

PowerShell ISE (Integrated Scripting Environment) is a free Windows application that provides a workspace for experimenting with and writing [[PowerShell CmdLets]] and scripts. It…

Why Malware Names Are Not Enough

2026-09-20 #malware-analysis #practical-malware-analysis #incident-response #antivirus #ids-signatures #introduction

The opening of *Practical Malware Analysis* presents a cautionary incident-response scenario: a network is breached, antivirus identifies the malware as **TROJ.snapAK**, the respo…

Malware Analysis: Role and Value of the Analyst

2026-09-20 #malware #malware-analysis #incident-response #security-career #practical-malware-analysis

# Malware Analysis **Malware analysis** is the process of dissecting malicious software to understand how it works, how to identify it, and how to defeat or eliminate it. It is a…