Digital Forensics Resources

Tools

• PowerShell Uses
• Python Uses

Tasks

• PowerShell Forensic Copy and Verification
• PowerShell Forensic File Recovery

Examples

1. Website
2. Tool

Demonstration Teams - 2021 Fall

1. Workshop Wed 10-06 EnCase
2. Workshop Fri 10-08 Splunk
3. Workshop Wed 10-27 Autopsy
4. Workshop Wed 10-27 Passware
5. Workshop Fri 11-05 BinWalk
6. Workshop Wed 11-10 Mobile
7. Workshop Fri 11-12 Volitility
8. Workshop Fri 11-19 Decyption

With Help From

• Git Large File Storage (LFS)
• Free limit for LFS is 2 GB, so can't host the 7.5 GB extracted file in Ch09.

See Also

2022 Chapter 5 Exercise (Module 2) requires

• Large Ch05 zipfile (800 MB+) available for download from:
• https://drive.google.com/file/d/1jhjynlBisP4gL9x6uamyh9LOo8LJJroQ/view?usp=sharing
• too big for GitHub and Git Large File System (for free)