Home Page

dfir.org is the personal page of Andrew Case (@attrc). This website serves as a central location for all of my research, software projects, and speaking events. If you are interested in taking one of the training courses I teach or in having me speak at your event then please see the Contact page.

An interview on my background and path into forensics can be found on Eric Huber's blog, A Fistful of Dongles.

I am the Director of Research at Volexity.

My Upcoming Events:

Memory Forensics Training, Enfuse, May 2016
Volatility Memory Forensics and Malware Analysis Training, NYC, June 2016
Digital Forensics & Incident Response Training, Black Hat USA, August 2016
Volatility Memory Forensics and Malware Analysis Training, Amsterdam, August 2016
Volatility Memory Forensics and Malware Analysis Training, Reston, October 2016
SecTor, Toronto, October 2016

Subscribe to The Homepage of @attrc RSS