Digital Forensics, Part 4: Finding Key Evidence in the Forensic Image
Digital Forensics, Part 4: Finding Key Evidence in the Forensic Image In the previous articles in this series, we captured an forensic image of the suspect’s hard drive, we captured a forensic image of the suspect’s RAM and we had used Autopsy to recover deleted files from our first image. In this lab, we will…