<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en-US"><generator uri="https://jekyllrb.com/" version="3.10.0">Jekyll</generator><link href="/feed.xml" rel="self" type="application/atom+xml" /><link href="/" rel="alternate" type="text/html" hreflang="en-US" /><updated>2026-10-21T19:42:31-04:00</updated><id>/feed.xml</id><title type="html">Digital Forensics Association</title><subtitle>The Champlain College Digital Forensics Association. Weekly talks, hands-on labs, and CTF practice for anyone interested in DFIR.</subtitle><entry><title type="html">Club CTF Night</title><link href="/news/2026/10/ctf-night/" rel="alternate" type="text/html" title="Club CTF Night" /><published>2026-10-21T00:00:00-04:00</published><updated>2026-10-21T00:00:00-04:00</updated><id>/news/2026/10/ctf-night</id><content type="html" xml:base="/news/2026/10/ctf-night/"><![CDATA[<p>Our first CTF night of the year! Challenges range from beginner (find the hidden file) to tough (carve it out of a memory dump). Come solo or bring a team of up to four. Snacks provided.</p>]]></content><author><name></name></author><summary type="html"><![CDATA[Our first CTF night of the year! Challenges range from beginner (find the hidden file) to tough (carve it out of a memory dump). Come solo or bring a team of up to four. Snacks provided.]]></summary></entry><entry><title type="html">Mobile Forensics 101</title><link href="/news/2026/10/mobile-forensics-101/" rel="alternate" type="text/html" title="Mobile Forensics 101" /><published>2026-10-21T00:00:00-04:00</published><updated>2026-10-21T00:00:00-04:00</updated><id>/news/2026/10/mobile-forensics-101</id><content type="html" xml:base="/news/2026/10/mobile-forensics-101/"><![CDATA[<p>Phones hold more evidence than almost any other device. This session covers how iOS and Android store data, the difference between logical, file-system and physical extractions, and a guided look at a sample Android image.</p>]]></content><author><name></name></author><summary type="html"><![CDATA[Phones hold more evidence than almost any other device. This session covers how iOS and Android store data, the difference between logical, file-system and physical extractions, and a guided look at a sample Android image.]]></summary></entry><entry><title type="html">Workshop: Windows Artifacts</title><link href="/news/2026/10/windows-artifacts-workshop/" rel="alternate" type="text/html" title="Workshop: Windows Artifacts" /><published>2026-10-20T00:00:00-04:00</published><updated>2026-10-20T00:00:00-04:00</updated><id>/news/2026/10/windows-artifacts-workshop</id><content type="html" xml:base="/news/2026/10/windows-artifacts-workshop/"><![CDATA[<p>What did the user run, and when? This week we dig into the Windows artifacts that answer that question: Prefetch, Shellbags, and LNK files.</p>

<p><strong>Bring a laptop.</strong> We’ll provide a disk image and walk through parsing each artifact with free tools. A Windows VM is helpful but not required.</p>]]></content><author><name></name></author><summary type="html"><![CDATA[What did the user run, and when? This week we dig into the Windows artifacts that answer that question: Prefetch, Shellbags, and LNK files.]]></summary></entry><entry><title type="html">Fall 2026 meeting schedule is up</title><link href="/news/2026/10/fall-2026-schedule/" rel="alternate" type="text/html" title="Fall 2026 meeting schedule is up" /><published>2026-10-15T00:00:00-04:00</published><updated>2026-10-15T00:00:00-04:00</updated><id>/news/2026/10/fall-2026-schedule</id><content type="html" xml:base="/news/2026/10/fall-2026-schedule/"><![CDATA[<p>Welcome back! Here’s the plan for the rest of the fall semester. Every meeting is open to all majors and experience levels.</p>

<table>
  <thead>
    <tr>
      <th>Date</th>
      <th>Topic</th>
    </tr>
  </thead>
  <tbody>
    <tr>
      <td>Oct 14</td>
      <td>Intro to Memory Forensics with Volatility 3</td>
    </tr>
    <tr>
      <td>Oct 28</td>
      <td>Windows Artifacts: Prefetch, Shellbags &amp; LNK Files</td>
    </tr>
    <tr>
      <td>Nov 4</td>
      <td>Mobile Forensics 101</td>
    </tr>
    <tr>
      <td>Nov 14</td>
      <td>Club CTF Night</td>
    </tr>
  </tbody>
</table>

<p>Slides from each night will be posted on the <a href="/presentations/">Presentations</a> page after the meeting.</p>]]></content><author><name>DFA Officers</name></author><summary type="html"><![CDATA[Welcome back! Here’s the plan for the rest of the fall semester. Every meeting is open to all majors and experience levels.]]></summary></entry></feed>