Baker Street Forensics

Some of you found your way to Baker Street Forensics because you’re Sherlockians first, and forensicators second.

Version 4.3 introduces significant updates, including an At A Glance panel on the Home Screen displaying case statuses and integrations.

MalChela v4.2 introduces improved functionality for Mac analysis, allowing four tools to interact directly with .app bundles, eliminating the need to find buried binaries.

“I consider that a man’s brain originally is like a little empty attic, and you have to stock it with such furniture as you choose.” — Sherlock Holmes, A Study in Scarlet There’s a particular kind of frustration that I suspect a lot of researchers know we…

MalChela v4.1 is out today, and the headline is something I’ve been wanting to tackle for a while: dedicated Mac malware analysis tooling.

As one tends to do on Saturday mornings with coffee in hand, I was reviewing two samples that were attributed to the LunaStealer / LunaGrabber family.

When I started building MalChela, I had a narrow problem to solve.

Recently I introduced Threat Intel Query (tiquery), a multi-source threat intelligence lookup tool.

One of the things I value most about the open-source community is that the best improvements to a tool often don’t come from inside it — they come from outside conversations.

Someone asked me recently how I see DFIR evolving — tooling, automation, and open-source versus enterprise platforms.