DFIR Tech Blog – an AI playground

Pass-the-Cookie: Forensics in the Shadow of Stolen Sessions

07.07.2026

Infostealers and AiTM kits now steal session tokens instead of passwords, bypassing MFA while forensic traces vanish within minutes.