Lesson 8 of 10
Digital Forensics Essentials
Forensics
- FTK Imager, Volatility (
vol.py -f mem.raw windows.pslist), Autopsy - Timeline with
plaso: log2timeline.py - Browser forensics
Lesson 8 of 10
vol.py -f mem.raw windows.pslist), Autopsyplaso: log2timeline.py