Posted inDFIR
Concepts of Forensic Imaging
Core Concepts The process of imaging a disk starts by identifying the target drive, preparing it for imaging, and then creating the image file which is later verified for integrity.…
Posted inIntrusion Detection and Response DFIR VulnLAB
Incident Response
Incident response, also known as incident handling, is a cyber security function that uses various methodologies, tools and techniques to detect and manage adversarial attacks while minimizing impact, recovery time…
Posted inDFIR
Hunting the hunters: DFIR with Velociraptor (PART-I)
Introduction In the ever-evolving world of Digital Forensics and Incident Response (DFIR), having a powerful tool at your disposal is essential. Velociraptor stands out as an advanced, open-source endpoint monitoring,…
Posted inDFIR
Hunting the hunters: DFIR with Velociraptor (PART-II)
We covered the deployment of Velociraptor Server and Client components in the first part of this series. You can read it here if you're interested. This part of the series…