Digital Forensics and Incident Response
Collect and analyse evidence after an incident: memory, disk, logs and timelines.
Advanced
Volatility 3 (memory) and Plaso (timelines) are written in Python.
Spotted a mistake or want to add detail? Suggest an improvement — Content Contributors' edits are reviewed by editors before they go live.
Discussion (0)
Sign in or join free to ask questions and discuss this topic.