← Back to SOC Analyst - Blue Team Operations

Lesson 8 of 10

Digital Forensics Essentials

Forensics

  • FTK Imager, Volatility (vol.py -f mem.raw windows.pslist), Autopsy
  • Timeline with plaso: log2timeline.py
  • Browser forensics