Please enable JavaScript.

Coggle requires JavaScript to display documents.

Forensics (dsgital) - Coggle Diagram

- - - - winPmen
      - Mac memory Reader
      - redline
      - hibr2bin
      - win32dd/win64dd
      - dmp2bin
      - Memoryze
    - - Should be captured for a fas analysis the system
      - Normally holds process, registry, file and internet/browser iformation
      - Memory/RAM holds huge amount of information
    - - Sens memory Forensics cheat sheet
    - - TOOLS
        
        Volatility
        
        Valofox
        
        DUMP
  - - - Splunk
      - PyFLAG
    - - AWStats
      - webalizer
      - Highlighter
    - - Used to correlate the various incident on the network
  - - - Netwitnes
      - tshark
    - - Moloch
      - NFSen
      - topdump
      - Snort/sguil
      - Wireshark
      - OSSIM
      - Network miner
    - - Network generally contains the clues of the compromis
      - URLs of the destanation