Digital Forensics & Incident Response

⌘Ctrlk

Digital Forensics & Incident Response

Welcome
General Notes
Data Collection, Processing, and Integration
- Cribl
- Splunk
Microsoft Defender KQL
- Introduction to KQL
Windows Forensics
- PsExec
- Security Patch/KB Install Date
Linux Forensics
ESXi Forensics
Memory Forensics
- Volatility
- Acquisition
Incident Response
iOS Forensics
- Checkm8 / checkra1n acquisitions/extractions
CTF / Challenges
Log Files
- Windows
Malware Analysis
- Identifying UPX packed ELF, decompressing, fixing, and analysing Linux malware
- PDF Analysis
Walking the VAD tree
OpenCTI
Vulnerability Management
- Setting Up Nessus (Essentials)
- Troubleshooting
Privacy

Powered by GitBook

On this page

General Notes
Disk images for various filesystems and configurations

NTFS, FAT32, with BitLocker

Coming shortly.

Previousext4, LVM, and LUKS1/LUKS2 NextNTFS, FAT32, exFAT with TrueCrypt, VeraCrypt

Last updated 2 years ago