Digital Forensics Basics Guide
Overview
Welcome to the Digital Forensics Basics Guide. This module is part of AppSec Atlas's comprehensive security curriculum, dedicated to mastering the art and science of Digital Forensics and Incident Response (DFIR). You will learn how to properly acquire, preserve, analyze, and present digital evidence following industry best practices.
Prerequisites
- Basic understanding of operating systems (Windows and Linux).
- Familiarity with the command line interface (CLI).
- Introductory knowledge of computer networks (TCP/IP, HTTP).
- Python programming (for custom artifact parsing).
Learning Objectives
- Understand the principles of DFIR, the Order of Volatility, and the Chain of Custody.
- Perform disk imaging and file carving techniques.
- Analyze critical operating system artifacts (Windows Registry, Linux logs).
- Conduct memory forensics using Volatility 3 to detect hidden malware.
- Perform browser forensics and network packet analysis.