Error message

Deprecated function: The each() function is deprecated. This message will be suppressed on further calls in menu_set_active_trail() (line 2404 of /home/b4gint3h/public_html/includes/menu.inc).

Home Page

dfir.org is the personal page of Andrew Case (@attrc). This website serves as a central location for all of my research, software projects, and speaking events. If you are interested in taking one of the training courses I teach or in having me speak at your event then please see the Contact page.

An interview on my background and path into forensics can be found on Eric Huber's blog, A Fistful of Dongles.

I am the Director of Research at Volexity.