Posts tagged "malware-analysis"

• SHA-1 in the Amcache: pivoting from disk to threat intel

  How the Amcache FileId field becomes the most useful pivot in a DFIR investigation, why hashes beat paths, and the workflow for hash-pivoting at scale.

  2026-05-27