Chimdi·Aug 24Windows Registry Forensics: Winlogon vs LogonUIRecently, I was attempting CyberDefenders’ CorporateSecrets challenge when I noticed something odd.
Mani·Jun 18How I Broke an Infinite Windows Boot Loop Using Enterprise Deployment CommandsThe Story of a 10-Hour Battle Against an Expired Windows Insider Build, Buggy Installer Scripts, and a 3F0 Motherboard Error.
InDFIR Dudesbymartin korman·Jan 4Regipy MCP: Natural Language Registry Forensics with ClaudeSix years ago, I wrote a blog post introducing regipy, a Python library I built because I was frustrated with existing registry forensic…
Martin St.·Dec 23, 2025Environment Variables on Windows: Where They Quietly Feed You the Wrong ValuesEnvironment variables are not flowing information.They are snapshots. A photograph of the system state at the exact moment a process…
InMeetCyberbyTHM{0x416469747961204D6163686972616A75}·Dec 17, 2025Forensics — Registry FurensicsLearn what the Windows Registry is and how to investigate it.
