← Back to Projects
Information Security Practice 2023
Digital Forensics Incident Triage & Evidence Recovery
FTK Imager CyberChef Volatility Memory Forensics Event Log Parsing
Digital Forensics Incident Triage & Evidence Recovery
Performed technical forensic analysis to identify malware persistence mechanisms and account breach vectors.
Key Features & Implementation
- Forensic Disk Imaging: Created write-blocked bit-stream images of affected system drives for offline analysis.
- RAM Memory Analysis: Extracted volatile RAM artifacts using Volatility to detect un-injected DLL payloads.
- Incident Timeline Reconstruction: Reconstructed chronological attack timelines from Windows Security Event logs.