Ali Hadi | B!n@ry
@binaryz0ne.bsky.social
DFIR and Adversary Simulation
Pinned
Ali Hadi | B!n@ry
@binaryz0ne.bsky.social
· Jul 27
If you’re looking to get into Digital Forensics, this is probably the most affordable & complete training you’ll find. The value packed into this bootcamp goes far beyond the price, & right now, there’s a discount running! #DFIR #DigitalForensics #CyberSecurity
PLEASE SHARE with others! Thank You!
PLEASE SHARE with others! Thank You!
After more than a decade in academia, teaching thousands of students and professionals, I’ve decided to return to the world of consulting. I’m deeply grateful to my family for their unwavering support and to everyone who has helped me grow into the person I am today. #DFIR
September 14, 2025 at 11:42 PM
After more than a decade in academia, teaching thousands of students and professionals, I’ve decided to return to the world of consulting. I’m deeply grateful to my family for their unwavering support and to everyone who has helped me grow into the person I am today. #DFIR
I want to thank @brettshavers.bsky.social for the opportunity taking his "DF/IR Investigative Mindset" course! This is an amazing course for everyone! Whether you're a vetran or just starting your #DFIR career. I can't recommend it enough.
Brett, thank you so much 🙏🏻
Brett, thank you so much 🙏🏻
September 14, 2025 at 11:41 PM
I want to thank @brettshavers.bsky.social for the opportunity taking his "DF/IR Investigative Mindset" course! This is an amazing course for everyone! Whether you're a vetran or just starting your #DFIR career. I can't recommend it enough.
Brett, thank you so much 🙏🏻
Brett, thank you so much 🙏🏻
Or these PDF/TXT executables!
September 7, 2025 at 4:00 PM
Or these PDF/TXT executables!
For those who love executables :)
September 7, 2025 at 3:59 PM
For those who love executables :)
🚀 Starting August, you'll be able to test your malware analysis skills with our upcoming certification exam!
Huge thanks to "Saad AHLA" for leading the development of this challenge. Get ready, this is truly a fun one!
#malware #DFIR #CyberSecurity #ThreatHunting #BlueTeam #CCMA
Huge thanks to "Saad AHLA" for leading the development of this challenge. Get ready, this is truly a fun one!
#malware #DFIR #CyberSecurity #ThreatHunting #BlueTeam #CCMA
July 28, 2025 at 6:30 PM
🚀 Starting August, you'll be able to test your malware analysis skills with our upcoming certification exam!
Huge thanks to "Saad AHLA" for leading the development of this challenge. Get ready, this is truly a fun one!
#malware #DFIR #CyberSecurity #ThreatHunting #BlueTeam #CCMA
Huge thanks to "Saad AHLA" for leading the development of this challenge. Get ready, this is truly a fun one!
#malware #DFIR #CyberSecurity #ThreatHunting #BlueTeam #CCMA
Our CCDFA Bootcamp is one of the best deals in DFIR training! The course content, labs, virtual lab access, and live sessions all included.
Only have 2 seats left for the August bootcamp!
academy.cyber5w.com/courses/c5w-...
#DFIR #DigitalForensics #CyberSecurity #BlueTeam #IncidentResponse
Only have 2 seats left for the August bootcamp!
academy.cyber5w.com/courses/c5w-...
#DFIR #DigitalForensics #CyberSecurity #BlueTeam #IncidentResponse
C5W CERTIFIED DIGITAL FORENSICS ANALYST - LIVE TRAINING
The Windows Forensics course explores the forensic artifacts one may encounter when working with the Windows operating system. This course is focused on hands-on labs that covers artifacts, which are ...
academy.cyber5w.com
July 28, 2025 at 5:15 PM
Our CCDFA Bootcamp is one of the best deals in DFIR training! The course content, labs, virtual lab access, and live sessions all included.
Only have 2 seats left for the August bootcamp!
academy.cyber5w.com/courses/c5w-...
#DFIR #DigitalForensics #CyberSecurity #BlueTeam #IncidentResponse
Only have 2 seats left for the August bootcamp!
academy.cyber5w.com/courses/c5w-...
#DFIR #DigitalForensics #CyberSecurity #BlueTeam #IncidentResponse
Last semester I created a course to help students start learning about Threat Simulation & Hunting. I used GOAD for the testing environement. So shoutout to @M4yFly for creating GOAD. Every lab was themed around the Game of Thrones series; students liked it.
labs.cyber5w.com/courses/218b...
labs.cyber5w.com/courses/218b...
Threat Simulation and Hunting
From Shells to Thrones - Think Like an Adversary. Hunt as a Defender. Protect the Kingdom.
labs.cyber5w.com
July 27, 2025 at 3:47 PM
Last semester I created a course to help students start learning about Threat Simulation & Hunting. I used GOAD for the testing environement. So shoutout to @M4yFly for creating GOAD. Every lab was themed around the Game of Thrones series; students liked it.
labs.cyber5w.com/courses/218b...
labs.cyber5w.com/courses/218b...
We created a simple certification exam "C5W Certified Digital Forensics Foundations (CDFF)" for those who took our FREE Intro to Digital Forensics course and want to test their skills #DFIR
academy.cyber5w.com/courses/c5w-...
#DFIR #C5W #CyberSecurity #DigitalForensics
academy.cyber5w.com/courses/c5w-...
#DFIR #C5W #CyberSecurity #DigitalForensics
C5W Certified Digital Forensics Foundations Exam
The CDFF exam validates your understanding of digital forensics fundamentals, including evidence acquisition, file systems, FTK Imager, timestamp analysis, and reporting, ideal for beginners entering ...
academy.cyber5w.com
July 27, 2025 at 3:35 PM
We created a simple certification exam "C5W Certified Digital Forensics Foundations (CDFF)" for those who took our FREE Intro to Digital Forensics course and want to test their skills #DFIR
academy.cyber5w.com/courses/c5w-...
#DFIR #C5W #CyberSecurity #DigitalForensics
academy.cyber5w.com/courses/c5w-...
#DFIR #C5W #CyberSecurity #DigitalForensics
If you’re looking to get into Digital Forensics, this is probably the most affordable & complete training you’ll find. The value packed into this bootcamp goes far beyond the price, & right now, there’s a discount running! #DFIR #DigitalForensics #CyberSecurity
PLEASE SHARE with others! Thank You!
PLEASE SHARE with others! Thank You!
July 27, 2025 at 3:32 PM
If you’re looking to get into Digital Forensics, this is probably the most affordable & complete training you’ll find. The value packed into this bootcamp goes far beyond the price, & right now, there’s a discount running! #DFIR #DigitalForensics #CyberSecurity
PLEASE SHARE with others! Thank You!
PLEASE SHARE with others! Thank You!
🔒 Master Windows Sandbox for secure app testing!
Learn to install, configure, and safely run suspicious apps in an isolated environment.
💻 Hands-on labs included
💰 You can take it for FREE or Pay to Support Us!
labs.cyber5w.com/courses/975e...
#CyberSecurity #DFIR #C5W #WindowsSandbox #malware
Learn to install, configure, and safely run suspicious apps in an isolated environment.
💻 Hands-on labs included
💰 You can take it for FREE or Pay to Support Us!
labs.cyber5w.com/courses/975e...
#CyberSecurity #DFIR #C5W #WindowsSandbox #malware
July 27, 2025 at 3:24 PM
🔒 Master Windows Sandbox for secure app testing!
Learn to install, configure, and safely run suspicious apps in an isolated environment.
💻 Hands-on labs included
💰 You can take it for FREE or Pay to Support Us!
labs.cyber5w.com/courses/975e...
#CyberSecurity #DFIR #C5W #WindowsSandbox #malware
Learn to install, configure, and safely run suspicious apps in an isolated environment.
💻 Hands-on labs included
💰 You can take it for FREE or Pay to Support Us!
labs.cyber5w.com/courses/975e...
#CyberSecurity #DFIR #C5W #WindowsSandbox #malware
This is a great opportunity for beginners to put their skills to the test! #DFIR #Cybersecurity #Infosec #DigitalForensics
🚨 The C5W Certified Digital Forensics Foundations (CDFF) Exam is LIVE!
🎓 Prove your skills: FTK Imager, file systems, timestamps & more. #CDFF #DFIR #DigitalForensics #Cyber5W #Cybersecurity #Infosec
🔥 50% OFF for the first 20 participants!
👉 academy.cyber5w.com/courses/c5w-...
🎓 Prove your skills: FTK Imager, file systems, timestamps & more. #CDFF #DFIR #DigitalForensics #Cyber5W #Cybersecurity #Infosec
🔥 50% OFF for the first 20 participants!
👉 academy.cyber5w.com/courses/c5w-...
C5W Certified Digital Forensics Foundations Exam
The CDFF exam validates your understanding of digital forensics fundamentals, including evidence acquisition, file systems, FTK Imager, timestamp analysis, and reporting, ideal for beginners entering ...
academy.cyber5w.com
June 24, 2025 at 4:40 PM
This is a great opportunity for beginners to put their skills to the test! #DFIR #Cybersecurity #Infosec #DigitalForensics
Reposted by Ali Hadi | B!n@ry
We're happy to announce that @cyber5w.bsky.social is renewing their sponsorship of #OST2 at the Bronze🥉 level in 2025!
Learn more about Cyber5W and their forensics training here: ost2.fyi/Sponsor_Cybe...
Learn more about Cyber5W and their forensics training here: ost2.fyi/Sponsor_Cybe...
June 2, 2025 at 11:14 AM
We're happy to announce that @cyber5w.bsky.social is renewing their sponsorship of #OST2 at the Bronze🥉 level in 2025!
Learn more about Cyber5W and their forensics training here: ost2.fyi/Sponsor_Cybe...
Learn more about Cyber5W and their forensics training here: ost2.fyi/Sponsor_Cybe...
I was asked last week to help some students in the lab, but got surprised by my Digital Forensics senior students being there for one last time and giving me this gift!
I will miss you all and I am so lucky that I got to work with you for the last 4 years! THANK YOU SO MUCH ❤️
I will miss you all and I am so lucky that I got to work with you for the last 4 years! THANK YOU SO MUCH ❤️
May 5, 2025 at 12:18 AM
I was asked last week to help some students in the lab, but got surprised by my Digital Forensics senior students being there for one last time and giving me this gift!
I will miss you all and I am so lucky that I got to work with you for the last 4 years! THANK YOU SO MUCH ❤️
I will miss you all and I am so lucky that I got to work with you for the last 4 years! THANK YOU SO MUCH ❤️
This modexp.wordpress.com/2025/04/27/b... is an interesting post by
modexpblog ... highly recommend checking it out.
modexpblog ... highly recommend checking it out.
Beacon Object Files vs Tiny EXE Files
TL;DR A lot of bloat in an EXE file is just the statically linked C runtime. Link dynamically to msvcrt.dll (or ucrtbase.dll on Win 10+) plus a 40-line stub, and depending on the size of the progra…
modexp.wordpress.com
April 29, 2025 at 2:22 PM
This modexp.wordpress.com/2025/04/27/b... is an interesting post by
modexpblog ... highly recommend checking it out.
modexpblog ... highly recommend checking it out.
Join me at the @ Techno Security & Digital Forensics Conference! I’ll be speaking on "Utilizing ETW for Ransomware Threat Detection"
Register today at technosecurity.us/east/registr... and save 10% with code SPK25
#TechnoSecurity #DFIR #Malware #Ransomware
Register today at technosecurity.us/east/registr... and save 10% with code SPK25
#TechnoSecurity #DFIR #Malware #Ransomware
April 26, 2025 at 4:23 PM
Join me at the @ Techno Security & Digital Forensics Conference! I’ll be speaking on "Utilizing ETW for Ransomware Threat Detection"
Register today at technosecurity.us/east/registr... and save 10% with code SPK25
#TechnoSecurity #DFIR #Malware #Ransomware
Register today at technosecurity.us/east/registr... and save 10% with code SPK25
#TechnoSecurity #DFIR #Malware #Ransomware
Great thread to read #DFIR
Three years ago a law enforcement CTF team asked us about a disk image they were told was neutered & could not be launched into a virtual machine. Arsenal Image Mounter launched it into a VM fine & provided access to all the "suspect’s" secrets w/o Windows credentials. How? #DFIR
April 26, 2025 at 1:37 AM
Great thread to read #DFIR
Reposted by Ali Hadi | B!n@ry
Arsenal Image Mounter v3.11.307 is now available with minor fixes & other improvements which include improved handling of corrupt Registry hives when launching virtual machines. See the change log for more information. arsenalrecon.com/downloads #DFIR
April 25, 2025 at 5:13 PM
Arsenal Image Mounter v3.11.307 is now available with minor fixes & other improvements which include improved handling of corrupt Registry hives when launching virtual machines. See the change log for more information. arsenalrecon.com/downloads #DFIR
Excited to announce that I’ll be delivering a keynote at ICTCS’25 titled:
"Beyond Tools: DFIR in the Era of Emerging Threats"
Looking forward to connecting with researchers at #ICTCS25! #DFIR #CyberSecurity #DigitalForensics
"Beyond Tools: DFIR in the Era of Emerging Threats"
Looking forward to connecting with researchers at #ICTCS25! #DFIR #CyberSecurity #DigitalForensics
April 16, 2025 at 2:47 AM
Excited to announce that I’ll be delivering a keynote at ICTCS’25 titled:
"Beyond Tools: DFIR in the Era of Emerging Threats"
Looking forward to connecting with researchers at #ICTCS25! #DFIR #CyberSecurity #DigitalForensics
"Beyond Tools: DFIR in the Era of Emerging Threats"
Looking forward to connecting with researchers at #ICTCS25! #DFIR #CyberSecurity #DigitalForensics
Using Windows Sandbox - Course
This is another FREE course to learn howto setup and use Windows Sandbox for #malware analysis or anything you want. #DFIR #infosec #CyberSecurity
Check it out: labs.cyber5w.com/courses/975e...
This is another FREE course to learn howto setup and use Windows Sandbox for #malware analysis or anything you want. #DFIR #infosec #CyberSecurity
Check it out: labs.cyber5w.com/courses/975e...
Micro - Using Windows Sandbox
In this micro-course, you will learn how to install and configure Windows Sandbox to be used for different testing scenarios, such as malware analysis. By the end of this course, you will have a fully...
labs.cyber5w.com
April 5, 2025 at 5:08 PM
Using Windows Sandbox - Course
This is another FREE course to learn howto setup and use Windows Sandbox for #malware analysis or anything you want. #DFIR #infosec #CyberSecurity
Check it out: labs.cyber5w.com/courses/975e...
This is another FREE course to learn howto setup and use Windows Sandbox for #malware analysis or anything you want. #DFIR #infosec #CyberSecurity
Check it out: labs.cyber5w.com/courses/975e...
Interested in learning about #DFIR and don't know where to start? Then I recommend checking our full "C5W-100 - Introduction to Digital Forensics" course. It is completely FREE and it should help you get started. #infosec #cybersecurity CC: @cyber5w.bsky.social
academy.cyber5w.com/courses/C5W-...
academy.cyber5w.com/courses/C5W-...
C5W-100 INTRODUCTION TO DIGITAL FORENSICS
academy.cyber5w.com
April 5, 2025 at 5:07 PM
Interested in learning about #DFIR and don't know where to start? Then I recommend checking our full "C5W-100 - Introduction to Digital Forensics" course. It is completely FREE and it should help you get started. #infosec #cybersecurity CC: @cyber5w.bsky.social
academy.cyber5w.com/courses/C5W-...
academy.cyber5w.com/courses/C5W-...
Hey #DFIR community!
I’m excited to share that I’ve turned my 010 Editor video series into a full course. It includes 40+ videos and hands-on labs, so you can practice what you learn.
Please share with anyone who might find it useful!
I’m excited to share that I’ve turned my 010 Editor video series into a full course. It includes 40+ videos and hands-on labs, so you can practice what you learn.
Please share with anyone who might find it useful!
April 5, 2025 at 5:06 PM
Hey #DFIR community!
I’m excited to share that I’ve turned my 010 Editor video series into a full course. It includes 40+ videos and hands-on labs, so you can practice what you learn.
Please share with anyone who might find it useful!
I’m excited to share that I’ve turned my 010 Editor video series into a full course. It includes 40+ videos and hands-on labs, so you can practice what you learn.
Please share with anyone who might find it useful!
Scheduled Tasks and GhostTask Investigations | #ShadowMe Webinar #DFIR #Cybersecurity
www.youtube.com/watch?v=Xhez...
www.youtube.com/watch?v=Xhez...
Scheduled Tasks and GhostTask Investigations | ShadowMe Webinar
YouTube video by Ali Hadi
www.youtube.com
March 7, 2025 at 7:39 PM
Scheduled Tasks and GhostTask Investigations | #ShadowMe Webinar #DFIR #Cybersecurity
www.youtube.com/watch?v=Xhez...
www.youtube.com/watch?v=Xhez...
What to expect in the #ShadowMe series? #DFIR #Cybersecurity #Malware #Infosec
ShadowMe #1 - Intro to Static Malware Analysis
youtube.com/watch?v=8qq0...
ShadowMe #1 - Intro to Static Malware Analysis
youtube.com/watch?v=8qq0...
March 1, 2025 at 2:01 AM
What to expect in the #ShadowMe series? #DFIR #Cybersecurity #Malware #Infosec
ShadowMe #1 - Intro to Static Malware Analysis
youtube.com/watch?v=8qq0...
ShadowMe #1 - Intro to Static Malware Analysis
youtube.com/watch?v=8qq0...
Don't miss the livestream tomorrow with @johnhammond.bsky.social talking #DFIR ...
February 21, 2025 at 6:05 AM
Don't miss the livestream tomorrow with @johnhammond.bsky.social talking #DFIR ...