F for Forensics

Ben & Alex
  • 5.0 (2)
  • TECHNOLOGY

Welcome to F for Forensics — the ultimate digital forensic podcast for cybersecurity professionals, investigators, and tech sleuths! Hosted by Ben and Alex, each episode explores the tools, techniques, and real-world cases behind computer forensics, file system analysis, data recovery, incident response, and more. Whether you're into NTFS carving, malware artifacts, or forensic imaging, this is your byte-sized boost of expert insight and geeky banter. Subscribe now for deep dives into digital evidence, tool reviews, interviews, and forensic case studies every week!

Episodes

  1. FEB 17

    F is for Federated Identity: When Login Is the Crime

    In this episode we dive into the modern reality of identity-driven attacks. In today’s cloud-first world, attackers don’t need malware or exploits — they simply log in. Learn how federated identity systems like Microsoft Entra ID, Okta, and Google Workspace change the forensic landscape, why credentials and tokens have become the new attack surface, and how investigators can uncover evidence hidden inside authentication logs, access events, and OAuth permissions. If you want to understand how to investigate cases where login itself is the crime, this episode is essential listening. #FforForensics #DigitalForensics #DFIR #CloudForensics #IdentitySecurity #FederatedIdentity #CyberForensics #IncidentResponse #CyberSecurity #AuthenticationLogs #MFA #TokenAbuse #ForensicPodcast

    32 min
  2. F is for the Future – Digital Forensics in a Cloud-First World

    FEB 3

    F is for the Future – Digital Forensics in a Cloud-First World

    Season 2 kicks off with a look at how digital forensics is evolving in a cloud-first world. We explore why traditional disk-based investigations no longer work, how identity and access have become the new evidence, and what investigators must learn to solve modern cases where logs, tokens, and timestamps matter more than files. #FforForensics #DigitalForensics #DFIR #CloudForensics #CyberForensics #IdentitySecurity #IncidentResponse #ForensicPodcast #CyberSecurity

    26 min
  3. F is for the Final Piece - Breaking a Case Wide Open

    12/30/2025

    F is for the Final Piece - Breaking a Case Wide Open

    In the final episode of the year, we bring everything together—file systems, memory, timelines, flash storage, and user activity—to show how real digital cases are solved from start to finish. This episode walks through how a single overlooked artifact can become the final piece that breaks a case wide open. We also reflect on the season and tease bigger, deeper, and more advanced forensic topics coming next year. This is a must-listen finale you won’t want to miss. #FforForensics #DigitalForensics #DFIR #ForensicPodcast #CyberForensics

    32 min
  4. F is for Flash Storage – Evidence in the Modern Drive

    12/23/2025

    F is for Flash Storage – Evidence in the Modern Drive

    In this episode, we break down the challenges and opportunities of flash storage forensics. From SSDs and USB drives to smartphones, learn how wear leveling, TRIM commands, and encryption impact evidence recovery—and why “deleted” doesn’t always mean gone. Real-world cases and practical techniques show how investigators adapt in the modern storage era. #FforForensics, #FlashForensics, #DigitalForensics, #DFIR, #CyberForensics, #SSDForensics, #FlashStorage, #DataRecovery, #ForensicAnalysis, #ComputerForensics, #MobileForensics, #CyberCrime, #ForensicPodcast

    43 min
  5. F is for Fragments in Time - Building Forensic Timelines

    12/17/2025

    F is for Fragments in Time - Building Forensic Timelines

    In this episode of F for Forensics, we explore how investigators transform scattered artifacts into a clear digital narrative using forensic timelines. From MACB timestamps and registry entries to browser data, logs, and super timelines, this episode breaks down how timelines reveal patterns, expose anomalies, and connect user actions across systems. Real-world examples show how seconds, not hours, can make or break a case. #FforForensics, #ForensicTimelines, #DigitalForensics, #DFIR, #CyberForensics, #TimelineAnalysis, #EventLogs, #Plaso, #Timesketch, #ComputerForensics, #ForensicAnalysis, #CyberCrime, #IncidentResponse, #ForensicPodcast

    35 min
  6. F is for Finding Ghosts in RAM – Live Memory Forensics

    12/09/2025

    F is for Finding Ghosts in RAM – Live Memory Forensics

    In this episode we tackle the fast-paced and volatile world of live memory forensics. They explore how RAM captures evidence that never touches the disk—passwords, keys, active malware, live sessions, command history, and more. Through real case examples, tools like Volatility and Rekall, and best-practice guidance, this episode uncovers why RAM is often the key to catching the activity happening right now. #FforForensics, #MemoryForensics, #RAMAnalysis, #LiveMemory, #DFIR, #DigitalForensics, #CyberForensics, #Volatility, #Rekall, #IncidentResponse, #CyberSecurity, #ForensicPodcast, #ComputerForensics, #MalwareAnalysis, #CyberCrime

    32 min
  7. F is for Forensic Failures – What Not to Do

    12/02/2025

    F is for Forensic Failures – What Not to Do

    In this episode, we dive into the most cringe-worthy mistakes in digital forensics—and the lessons they teach. From overwriting original evidence to remote-wiped phones, timestamp disasters, and documentation nightmares, this episode highlights what not to do in the lab. Whether you're new to DFIR or a seasoned examiner, these real-world fails will make you wince, laugh, and sharpen your forensic discipline. #FforForensics, #ForensicFails, #DigitalForensics, #DFIR, #CyberForensics, #IncidentResponse, #ChainOfCustody, #ForensicAnalysis, #ComputerForensics, #ForensicPodcast, #CyberCrime, #EvidencePreservation, #ForensicMistakes, #InvestigatorLife

    14 min
  8. F is for Forensic Imaging – Capturing the Crime Scene

    11/25/2025

    F is for Forensic Imaging – Capturing the Crime Scene

    In this episode we break down one of the most essential skills in digital forensics: forensic imaging. Learn why bit-for-bit acquisitions matter, how write-blockers protect evidence, which tools professionals rely on (from FTK Imager to Cellebrite), and the real-world mistakes that can make or break a case. Whether you're imaging a laptop, server, mobile device, or USB drive, this episode teaches you how to preserve digital evidence the right way. #FforForensics, #ForensicImaging, #DigitalForensics, #DFIR, #CyberForensics, #ForensicTools, #FTK, #EnCase, #WriteBlocker, #IncidentResponse, #ComputerForensics, #ForensicPodcast, #ChainOfCustody, #CyberCrime, #EvidencePreservation

    16 min
  9. F for Firmware Forensics - Forensics Beyond the OS

    11/06/2025

    F for Firmware Forensics - Forensics Beyond the OS

    In this episode of F for Forensics, we dig beneath the operating system into the hidden world of firmware forensics. Discover how BIOS, UEFI, IoT devices, and embedded controllers store traces of tampering and compromise. From analyzing firmware dumps to detecting persistent malware, this episode explores what happens when the investigation goes beyond the hard drive. #FforForensics, #FirmwareForensics, #DigitalForensics, #DFIR, #CyberForensics, #UEFI, #BIOS, #EmbeddedSystems, #IoTForensics, #MalwareAnalysis, #IncidentResponse, #ForensicPodcast, #CyberSecurity, #ComputerForensics

    14 min
  10. F is for File System: Carving Hidden Evidence

    10/29/2025

    F is for File System: Carving Hidden Evidence

    In this episode of F for Forensics, we break down the backbone of digital forensics—the file system. Learn how investigators recover deleted files, explore metadata, and carve hidden evidence from drives long after suspects think it’s gone. From NTFS and FAT32 to APFS and EXT4, this episode uncovers where digital secrets hide and how to find them. #FforForensics, #FileSystemForensics, #DigitalForensics, #DFIR, #CyberForensics, #DataCarving, #NTFS, #APFS, #EXT4, #ComputerForensics, #ForensicPodcast, #IncidentResponse, #CyberCrime, #ForensicAnalysis

    15 min
  11. F is for Footprints – Tracing User Activity Across Systems

    10/13/2025

    F is for Footprints – Tracing User Activity Across Systems

    On this episode, we uncover how digital footprints—from browser history and shell commands to registry hives and DNS logs—reveal a user’s activity even when they think it’s been erased. Real cases, practical tools, and expert tips for tracing every click, command, and mistake. #FforForensics #DigitalFootprints #UserActivity #DigitalForensics #DFIR #CyberForensics #WindowsRegistry #BrowserArtifacts #MemoryForensics #ComputerForensics #ForensicAnalysis #CyberCrime #ForensicPodcast

    40 min
  • 11 Episodes

Ratings & Reviews

5
out of 5
2 Ratings

About

Welcome to F for Forensics — the ultimate digital forensic podcast for cybersecurity professionals, investigators, and tech sleuths! Hosted by Ben and Alex, each episode explores the tools, techniques, and real-world cases behind computer forensics, file system analysis, data recovery, incident response, and more. Whether you're into NTFS carving, malware artifacts, or forensic imaging, this is your byte-sized boost of expert insight and geeky banter. Subscribe now for deep dives into digital evidence, tool reviews, interviews, and forensic case studies every week!

Information

  • Creator
    Ben & Alex
  • Years Active
    2025 - 2026
  • Episodes
    11
  • Rating
    Clean
  • Copyright
    © Ben & Alex
  • Show Website
    F for Forensics