Blog — River City Digital Forensics

Blog

Research, workflow writeups, and DFIR methodology

This layout is designed to help you publish technical content that supports your tools and builds authority over time.

Investigation workflow

Turning Interactive sign-in telemetry into an investigative narrative

Use this post slot for a detailed walkthrough of how sign-in analysis supports scoping, initial access review, and reporting.

Tool release

Release notes for the latest Sign-In Analyzer build

Summarize added features, bug fixes, documentation updates, and notable workflow improvements.

DFIR methodology

What investigators should look for in M365 audit telemetry

Create evergreen content around log interpretation, pivots, and practical use of audit events during triage.

Content strategy

Good first posts

Why Microsoft 365 sign-in logs matter in BEC/ATO cases
How to interpret high-value sign-in artifacts
Release note articles for each major tool update
Lessons learned from building investigator-focused DFIR interfaces

SEO + credibility

Why blog content matters

Your blog does more than attract traffic. It gives context to the tools, demonstrates technical depth, and makes the site feel like an active, credible DFIR resource rather than a bare download page.