Arsenal Recon
@ArsenalRecon
Developers of digital forensics weapons which include Arsenal Image Mounter, Hibernation Recon, LevelDB Recon, HBIN Recon, & Registry Recon. Arm Yourself! #DFIR
Arm yourself with our tools & eliminate blind spots in digital forensics! ArsenalRecon.com #DFIR
We've been quiet on social media this summer... when this happens, we tend to be focused on adding unique & powerful functionality to our digital forensics tools & high-stakes casework. Can you identify one of our summer priorities for Arsenal Image Mounter from this image? #DFIR

👀
I finally got around to set up a Synology NAS to work as a PXE server. #AIMRemoteAgent @WindowsFE @ArsenalRecon
Fellow #DFIR practitioners - what do you see happening in this short video involving WinFE, AIM Remote Agent, & Arsenal Image Mounter? ArsenalRecon.com
How do you connect AIM Remote Agent over a network to Arsenal Image Mounter on your forensic workstation when automatic discovery does not work (perhaps due to network filtering)? It's very easy - just use an IP address. See us demonstrate in this short video. #DFIR
Did you know that after booting a computer w/ WinFE, you can use AIM Remote Agent to connect it over a network to Arsenal Image Mounter on your forensic workstation w/ the same functionality as if the remote disk was a disk image or local physical disk? E.g. mounting VSCs! #DFIR
Headed back to the office after a few days at the Wisconsin ICAC conference where we provided training to digital forensics practitioners doing incredibly important work. We also learned more about how ESD (Electronic Storage Detection) K-9s are used & saw them in action. #DFIR

We were honored yesterday to show Wisconsin ICAC (Internet Crimes Against Children) conference attendees the incredible things that can be done once disk images (or actual physical disks, or remote disks over a network) are launched into virtual machines. #DFIR

We had a great time exhibiting & teaching over the last few days with ~1,000 attendees at the National Cyber Crime Conference. @MassAGO’s staff were very busy - there were up to *fifteen* simultaneous classes happening! #NCCC2025 #DFIR

Come see us at the National Cyber Crime Conference this week & let’s talk about what we can do with your electronic evidence! #NCCC2025 #DFIR

Watch Emina & Anastasia attach a disk image, an actual physical disk, & a remote disk to Arsenal Image Mounter & then launch each of them into a virtual machine with some of AIM's extremely powerful & unique functionality! vimeo.com/1079363782 #DFIR
Digital forensics involves identifying, preserving, analyzing, & reporting on electronic evidence using methods acceptable in courts of law. Source? Digital forensics practitioners who have seen some things... including some really bad definitions. #DFIR
Arsenal Image Mounter v3.11.307 is now available with minor fixes & other improvements which include improved handling of corrupt Registry hives when launching virtual machines. See the change log for more information. ArsenalRecon.com/downloads #DFIR

Attending the National Cyber Crime Conference in Boston next week? Come see our presentations & chat at our booth! You can see “Disk Images are Gamblers and Virtualization is Vegas” on 4/30 11:30am, 5/1 10am, & 5/1 3:50pm. mass.gov/info-details/n… #NCCC2025 #DFIR

After connecting Arsenal Image Mounter to a remote disk over a network (w/ AIM Remote Agent) you may want to obtain a disk image. Emina & Anastasia use AIM itself to obtain a disk image in this video, but you could use any disk imaging tool you like! ArsenalRecon.com #DFIR
Did you know you can attach not only disk images, but actual physical disks & remote disks to Arsenal Image Mounter? Then leverage all of AIM's powerful & unique functionality against them - launching VMs, mounting VSCs using multiple methods, etc. ArsenalRecon.com #DFIR

