05 / Case studies / Coming soon

The evidence is coming together.

We’re preparing investigations that show the questions, evidence, decisions, and lessons behind the work.

Every investigation starts with a question.

This page is coming soon.

While you’re here / A cybersecurity fact

Windows gives a failed login a number: 4625.

Windows Security Event ID 4625 records a failed logon. It can help an investigator identify the account involved and examine the reason the attempt failed.