Posts tagged "hash-pivoting"
- SHA-1 in the Amcache: pivoting from disk to threat intel
How the Amcache FileId field becomes the most useful pivot in a DFIR investigation, why hashes beat paths, and the workflow for hash-pivoting at scale.
2026-05-27
How the Amcache FileId field becomes the most useful pivot in a DFIR investigation, why hashes beat paths, and the workflow for hash-pivoting at scale.
2026-05-27