COMPUTER FORENSICS
FORENSICS IS A FOUR STEP PROCESS
GROUND ZERO – WHAT YOU CAN DO
Incident Response – What the Pros Do
What to Collect
Data Collection with dd, TCT & cryptcat
Acquisition – Takin’ it Off-Line
FBI List of Computer Forensic Laboratory Services
Summarization of acquisition (1)
Summarization of acquisition (2)
Summarization of acquisition (3)
Summarization of acquisition (4)
Extraction with Lazarus
Summarization of extraction (1)
Summarization of extraction (2)
Summarization of extraction (3)
Correlating Log Files
Shipping and Storage
Thinking Strategic
Pocket Security Toolkit
ADDITIONAL RESOURCES
Thank you …
Author: Weld Pond and Tan