Niklas Heringer
Niklas Heringer
Cybersecurity & Math.
⌘K
  • Home
  • Blog
  • #My Work
  • My publications
  • GitHub
  • My Linkedin
  • Events and Traveling
  • Armory
  • Next
  • My Medium
  • #Aspects
  • Penetration Testing
  • Skills Lab
  • Research
  • Digital Forensics
  • Security News
  • Field Notes
  • #Info and Guidance
  • Privacy Policy and Cookie Policy
  • Impressum
Subscribe Sign in
Niklas Heringer

Digital Forensics

Analysis and methods covering incident response and forensic investigation.
Digital Forensics for Beginners: How to Image a Disk, Carve Deleted Files, and Document Everything Like a Pro
digital-forensics

Digital Forensics for Beginners: How to Image a Disk, Carve Deleted Files, and Document Everything Like a Pro

Learn how to image a disk with dd, recover deleted files with Foremost and Scalpel, and document your entire investigation with forensic-log-tracker. A step-by-step beginner guide.
06 Apr
Forensics Challenge Day Three: Carving & Imaging
carving

Forensics Challenge Day Three: Carving & Imaging

We dive into forensic imaging, the art of carving, and tools like dd, Foremost, and Scalpel;'essential skills for data recovery and deleted file analysis.
25 Jun
Forensics Challenge Day Two - Sleuth Kit Deep Dive
forensics-challenge

Forensics Challenge Day Two - Sleuth Kit Deep Dive

On day two of my forensics challenge, I dive deep into Sleuth Kit’s layered toolset. From volumes to inodes, metadata, deleted files, timelines, and journals. I explore the core forensic workflows and decode a real ext4 image step by step.
12 Jun
Digital Forensics Challenge: Basics, Mounting & Analyzing Disk Images (Day 1)
forensics-challenge

Digital Forensics Challenge: Basics, Mounting & Analyzing Disk Images (Day 1)

In this introductory forensics lab, we explore how to mount and examine disk images using loop devices, losetup, SleuthKit tools, and file system inspection techniques. A hands-on walkthrough for raw, split, and forensic image formats like AFF and EWF.
11 Jun
Carving Chaos: Building and Breaking Filesystems for Fun and Forensics
digital-forensics

Carving Chaos: Building and Breaking Filesystems for Fun and Forensics

Crafted a Bash-powered forensics playground: build virtual file systems, inject payloads, carve lost files with Foremost & Scalpel — and hit every roadblock worth debugging.
30 May
Why Clean Logs Matter in Forensics - And How to Get Them Right
cli-tools

Why Clean Logs Matter in Forensics - And How to Get Them Right

In digital forensics, documentation is just as important as discovery. This guide introduces a CLI tool that helps forensic analysts create structured, signed, and legally sound logs - from the first command to the final report.
23 Apr
forensics-basics

What Is Digital Forensics, Really?

A beginner-friendly introduction to digital forensics: from traces and clues to how we reconstruct the past using data.
03 Apr
threat-landscape

Defensive Security Lecture – What SEC Consult Told Us About Phases of a Cyber Crisis

Insights from a guest lecture by SEC Consult on how real-world cyber crises unfold, what defines modern threats, and why proper incident response beats courtroom-ready forensics in most cases.
27 Mar
Niklas Heringer © 2026. Published with Ghost & Braun
  • Sign up
Privacy settings niklas-heringer.com

This website uses strictly necessary cookies and browser storage (member sign-in, security, your light or dark choice and this notice). With your consent it also measures anonymous visitor statistics. No advertising or cross-site tracking. Details in our Privacy Policy.

Privacy information
Strictly necessary Always on

Cookies and browser storage needed for the site to work: member sign-in (only after you log in), security features, your light or dark mode choice and the record of this notice.

Visitor statistics

Anonymous page-view statistics (Ghost Traffic Analytics, processed by Tinybird in the EU): visited page, referrer, browser and country. No cookies, not used for advertising or tracking across sites. Without your consent nothing is sent.

Newsletter emails Members only

If you subscribe, emails are sent via Mailgun (EU region). Technical delivery events are recorded. Open and click tracking are disabled for newly sent newsletters. Older emails may still contain tracking pixels or tracking links. You can unsubscribe at any time with the link in every email or in your account.