Sajid Nawaz Khan 
CTI, DFIR, Python Data Analysis. Oh, and food, films, museums, plants, and kindness 🏳️🌈🇬🇧
I shall never tire of the Barbican.
If you’re a macOS user supporting with Windows digital forensics, you’ll love IRFlow Timeline:
“A high-performance native macOS application for DFIR timeline analysis. Built on Electron + SQLite to handle large files for forensic timelines (CSV, TSV, XLSX, EVTX, Plaso) without breaking a sweat. Inspired by Eric Zimmerman's Timeline Explorer for Windows.”
https://github.com/r3nzsec/irflow-timeline
/cc @taylorparizo@infosec.exchange @timb_machine@infosec.exchange @tazwake@infosec.exchange @4enzikat0r@infosec.exchange #DFIR
@teamcymru_S2@infosec.exchange Hi, can you please include the publishing date on your blog posts please? e.g.,
https://www.team-cymru.com/post/tracking-orbs-on-singapores-telecommunications-networks
@ivory@tapbots.social Running build 24177 on iPad, and the app clips into the status bar. Rotating to landscape and back fixes it momentarily, until the app is relaunched.
The release of ATT&CK v19, expected on 28 April 2026, will split the Defense Evasion tactic into two: Stealth, and Impair Defenses.
As a result of these updates, a number of sub-techniques within T1562 (Impair Defenses) will likely now be promoted to technique level. More details at:
https://medium.com/mitre-attack/defense-evasion-split-a-tale-of-two-tactics-5d533545fa32
A convoluted Lotus Blossom infection chain leads to an otherwise unremarkable Cobalt Strike configuration:
https://www.rapid7.com/blog/post/tr-chrysalis-backdoor-dive-into-lotus-blossoms-toolkit/
@ShellFish@indieapps.space Happy New Year! Found a reproducible bug, which hides the Settings heading label across all areas:
1. Settings
2. Shell Integration (make no changes, then back out to the previous screen)
3. All Titles now missing
This also causes havoc in various places, like in the Snippets page.
@tazwake@infosec.exchange This PR looks promising!
@stroughtonsmith@mastodon.social When opening Broadcasts on AppleTV, the app loads and shows me an RTE collection. Around 5-10 seconds later, that is replaced by my actual saved station list. Only ever happens on the AppleTV. Unsure whether this is a known issue? Thanks!