Arm yourself with our tools & eliminate blind spots in digital forensics! https://t.co/w8v2JqX7rn #DFIR

We're building a new CTF (Capture the Flag) disk image incorporating technologies (e.g. Windows on Arm) & configurations not seen before in publicly-accessible disk images. Are there applications or configurations important to your casework that you would like us to add? #DFIR

Our latest in-person training “Windows Arm-on-Arm (WoA) Virtualization for Digital Forensics Practitioners” debuted last week, covering why we launch VMs from disk images (& actual & remotely-connected disks), peculiarities w/ WoA vs. x64, WinFE, BitLocker, S Mode, & more. #DFIR

What are we working on this morning? https://t.co/w8v2JqX7rn #DFIR

Involved in #DFIR in New England? Come to @HTCIA & Bridgewater State University's Cybersecurity & Justice Pedagogy Conference on Dec 4 for free & unique training incl. our new “Windows Arm-on-Arm Virtualization for Digital Forensics Practitioners" presentation. DM for details!

Some Monday morning #DFIR R&D... do you know what you are looking at here? https://t.co/w8v2JqX7rn

Have you ever analyzed a computer (server, embedded, or desktop) running one of the BSD-based distributions? #DFIR

Have you seen computers booted with @SUMURIForensics PALADIN launched into virtual machines over a network? https://t.co/JOdcwfVDWB. https://t.co/w8v2JqXFgV #DFIR

Did you know the latest Arsenal Image Mounter not only runs on Windows on Arm, but launches virtual machines from safely-booted Arm computers over a network? See a Dell XPS 13 launching an Inspiron 14 3420 booted with WinFE: https://t.co/oEaZCh0cgp. https://t.co/w8v2JqX7rn #DFIR

Arsenal Image Mounter’s BitLocker support has been extended to Windows File System Driver Bypass Mode thanks to integration with Joachim Metz’s libbde. See it in action against a disk image from a Windows on Arm tablet: https://t.co/1L6Mn2RLLh. https://t.co/w8v2JqXFgV #DFIR

Every digital forensics practitioner in consulting, law enforcement, & military should have a forensic workstation running Windows on Arm & Arsenal Image Mounter nearby. Not sure why? See for yourself: https://t.co/myDo0J9xOF. https://t.co/w8v2JqXFgV #DFIR

"My client was stunned that he could see how the document looked over time just as the user had seen it, & asked if this was voodoo forensics! Leveraging VSCs launched into virtual machines was crucial to this matter & very jury friendly." See more: https://t.co/wl1kwhNiq5. #DFIR

In case you missed it last week, a new Arsenal Image Mounter (v3.12.331) has been released with a long list of improvements for #DFIR practitioners including Arm on Arm virtualization. You can see some highlights in our Insights article at https://t.co/iv5aqAQ5lK.

Check out this awesome testimonial regarding launching Windows Volume Shadow Copies (VSCs) into virtual machines with AIM! Have you tried this in your own #DFIR casework yet? https://t.co/w8v2JqXFgV

Are you a #DFIR practitioner in the New England area? Want to see Arsenal Image Mounter’s new functionality in person? Contact us & let’s set something up soon so you can see Arm on Arm virtualization, AIM Remote Agent enhancements, & more! https://t.co/w8v2JqX7rn

Interesting form factor from Lenovo... if this comes out with the Snapdragon X2 Elite, it will be headed our way: https://t.co/6ALV6imQGn.

Do you have a digital forensics workstation running Windows on Arm (WoA) in your lab yet? We have some thoughts about this towards the end of our latest Insights article at https://t.co/Z3t7ReOTl7. Let’s discuss! #DFIR

Week 44 – 2025 #DFIR https://t.co/8oGCrFI3a9

Check out our latest Insights article "Quick Tour Of New Features In Arsenal Image Mounter v3.12.331" to see highlights (lots of screenshots!) of the latest AIM functionality: https://t.co/iv5aqAQ5lK. #DFIR

Did you know that AIM Remote Agent can be run from @SUMURIForensics PALADIN? See Anastasia boot a Surface Pro 5 w/ two 512gb drives, connect both drives to AIM across a network (w/ automatic Storage Spaces reassembly), & launch a virtual machine. https://t.co/w8v2JqXFgV #DFIR

Did you know that Arsenal Image Mounter running on Windows on Arm (WoA) can launch virtual machines across a network from WoA laptops & tablets (booted in a forensically-sound manner, e.g. w/ WinFE or PALADIN) thanks to AIM Remote Agent? See it now! https://t.co/w8v2JqXFgV #DFIR