dfir.org is the personal page of Andrew Case (@attrc). This website serves as a central location for all of my research, software projects, and speaking events. If you are interested in taking one of the training courses I teach or in having me speak at your event then please see the Contact page.
