Explore the tools, techniques, and methodologies used to investigate cyber incidents and recover digital evidence. This category covers forensic imaging, memory analysis, file system recovery, log correlation, artifact extraction, and incident response strategies. Learn how professionals trace intrusions, reconstruct events, and support legal action with technical precision.
Welcome back, my aspiring network forensic investigators! Now that you have a basic understanding of Wireshark and have conducted an analysis of a malware attack using Wireshark, let’s expand our purview of network attacks to that critical but often overlooked…
Welcome back, my hacker apprentices! Network forensics is key element of most digital forensics and incident response (DFIR) investigations. When our systems have been compromised by an attacker, its up the DFIR investigator to determine the who, what, where and…
Over the past decade or so, the growth of the mobile market has been the fastest growing segment of the IT industry. We now have portable smart phones and tablets being used throughout the consumer and business market. These add…
This past week, NSA contractor Reality Winner, was caught and arrested for leaking information to the Interecept. This was evidence that the NSA had collected that clearly showed how the Russian hackers had attempted (maybe successfully) to hack the U.S.…
In many cases when a computer, phone, or mobile device is seized for evidence, the system will have graphic images that might be used as evidence. Obviously, in some cases these graphic images may be the evidence such as in…
This is the seventh installment in my Digital Forensics series. To read the first 6, please click here. Often, the web browser that a suspect uses can provide us a bounty of information on what the suspect was doing online…
This is the sixth tutorial in my Digital Forensics series. If you would like to read the previous 5, go the Forenics tab at the top of the Menu bar to find the first 5. Introduction to the Windows Prefetch…
In the previous articles in this series, we captured an forensic image of the suspect’s hard drive, we captured a forensic image of the suspect’s RAM and we had used Autopsy to recover deleted files from our first image. In…
In the first two parts of this series, we captured a forensically sound image of the hard drive or other storage device and an image of the RAM. In this tutorial, we will recover any files deleted by the suspect.…
Those of my readers in the U.S. certainly know, and those of my readers elsewhere in the world probably know, the U.S. is having a presidential election this year. These candidates are BOTH disliked and distrusted by the majority of…
over 56 hours of video content, 10 expert lead courses, and 3 books.
$149
Master OTW put together a powerhouse bundle with everything you need to start hacking
You’re not going to find a more loaded starter kit
