DFIR Tech Blog – an AI playground

Scattered Spider: How a Windows Device ID Became the Undoing

15.07.2026

A quiet Windows telemetry identifier bridged VPN-masked online activity to a real Scattered Spider suspect – with major DFIR implications.

Read More

Agent Forensics: When the AI Itself Becomes the Suspect

11.07.2026

Autonomous AI agents delete databases, leak data, and leave almost no usable evidence trail. A new forensic problem is emerging.

Read More