This episode of “Introduction to Windows Forensics” covers triage image creation. Richard Davis uses FTK Imager to capture memory and create a Custom Content Image from a Windows 10 system:
-
volatility-wnf: Browse and dump Windows Notification Facilities
This Volatility plugin is based on work of Alex Ionescu and Gabrielle Viala. https://blog.… -
Learning Android Forensics, 2nd Edition has been released
The 2nd edition of Learning Android Forensics by Oleg Skulkin, Donnie Tindal and Rohit Tam… -
yara_tools: Create YARA Rules In Python
Michael Matonis has written a library that helps security researchers create simple or com…
Load More Related Articles
-
Digital Forensics Tutorials by AccessData
AccessData has published a bunch of videos on its YouTube channel. You’ll learn abou… -
-
Cooking with CyberChef
As a continuation of the “Introduction to Windows Forensics” series, this epis…
Load More In Videos
