This article is devoted to the tool that extracts various artifacts from the AD environment into a specially formatted Microsoft Excel. ADRecon can be ran from any workstation that is connected to the environment.

Computer attacks constantly worry administrators and computer users. Earlier we already talked about volatility.

Plugin for the platform Volatility Framework, whose goal is to extract the encryption keys Full Volume Encryption Keys (FVEK) from memory. It works from Windows 7 to Windows 10. Unfortunately, the support for Windows 8 – 10 is very experimental, but it works in most cases with a few quirks.

Forensically is a set of online toos for detecting forgery images.

Apktool is a tool for reverse engineering 3rd party, closed, binary Android apps.