Category Windows Forensics

Forensics, Memory Forensics, Windows Forensics

Introduction to Digital Forensics: Preparing for the Unexpected with Volatility, Wireshark, Hayabusa and FTK Imager

Understanding Digital Forensics Digital forensics involves the recovery and investigation of material found in digital devices (Windows or Linux computers, smartphones and legacy mobile phones and now, even cars) often in relation to computer crime, cyber intrusions and insider threats.…

Clint Marsden
July 9, 2024

Evidence Acquisition, Memory Forensics, Windows Forensics

Basic Digital Forensics Process

I’ve shared this on Linkedin just yesterday 22 April 2024, but here I can provide a little more context. Before doing this work, it helps if you’ve followed the NIST Computer Security Incident Handling guide (SP800-61) available from: If…

Clint Marsden
April 23, 2024
1 Comment

Uncategorized, Windows Forensics

Evidence of file execution

Don’t Deny It! When you were a child, did you ever do something that you shouldn’t have, and when caught and subsequently questioned by your parents as to whether you just did something which is blaringly obvious, did you deny…

Clint Marsden
March 30, 2020