Legal Admissibility of Digital Evidence: Federal Rules of Evidence and Daubert Standards

Digital evidence is defined as any data of investigative value that is stored or transmitted in binary form. Recognizing its importance helps forensic analysts feel assured in the reliability of their work when reconstru…

February 9, 2026 · 4 min · 759 words · Joshua Wortz

Mobile Device Forensics: Extraction, Decoding, and SQLite Database Analysis

What is the phone number of this phone? The phone number is the same as the Mobile Subscriber Integrated Services Digital Network (MSISDN) number for the SIM card….

February 2, 2026 · 4 min · 706 words · Joshua Wortz

Forensic Artifact Analysis Using Autopsy: File System Reconstruction and Timeline Carving

Academic research analysis exploring examine the evidence using autopsy within the context of Cyber Incident Response and Computer Network Forensics….

January 26, 2026 · 1 min · 163 words · Joshua Wortz

Digital Forensics: Evidence Acquisition, Chain of Custody, and Volatile Memory Preservation

Why or why not? No, because the data changed, and since hashing algorithms are designed to produce the same value for identical inputs. Any changes to the inputs result in a different hash….

January 19, 2026 · 36 min · 7622 words · Joshua Wortz

Enterprise Incident Response Plan and RACI Governance Matrix

In 2008, while working at a university, I inadvertently triggered a bulk deletion script in the production environment instead of a test folder, erasing approximately 50% of the student body’s accounts before I could hal…

January 12, 2026 · 7 min · 1404 words · Joshua Wortz

Software Security Metrics, Technical Debt Quantification, and Program Maturity

Risk assessment in the modern software industry must evolve beyond static checklists to address the dynamic nature of Agile and DevSecOps environments. This plan adopts a scenario-based approach aligned with ISO 27001, b…

December 8, 2025 · 6 min · 1226 words · Joshua Wortz

Ransomware Simulator: Cryptographic Attack Modeling and Application-Level Defenses

Broadcom. (2016). Alpha Ransomware. Symantec Enterprise. https://www.broadcom.com/support/security-center/protection-bulletin/alpha-ransomware…

November 30, 2025 · 6 min · 1184 words · Joshua Wortz

Static Application Security Testing (SAST) and Secure Web Application Design

International Information System Security Certification Consortium (ISC2). (n.d.). Cybersecurity certifications and continuing education. https://www.isc2.org…

November 24, 2025 · 9 min · 1901 words · Joshua Wortz

Threat Modeling and Architectural Risk Analysis: STRIDE and DREAD Applications

Hardening a Windows Server environment requires a structured, multi-layered approach that addresses risks, threats, and vulnerabilities across organizational, architectural, network, identity, software, and auditing doma…

November 17, 2025 · 13 min · 2663 words · Joshua Wortz

Secure Software Development Life Cycle (SSDLC): Comparative Analysis of Microsoft SDL and Apple Ecosystems

Security cannot be treated as a post-deployment consideration in modern software development. Microsoft’s Security Development Lifecycle (SDL) embeds security requirements, threat modeling, verification, and monitoring i…

November 14, 2025 · 9 min · 1901 words · Joshua Wortz