edu_for

A cheat sheet for digital forensics :blush:

Memory forensics w/ Volatility

• Download
• Command reference
• Malware Triage

Exercises

• Where is Malware?
• Memory_easy
• Infected Memory

File system forensics

MBR

• MBR structure
• Partition types
• MBR examination

FAT

• Specification
• FAT on NTFS.com
• FAT volume structure

Exercises

• Saturated FAT

NTFS

HFS+

Android

Further reading

• Deus ex machina