Dfir skills

Collecting Volatile Evidence

mukul975

Capture critical data from compromised hosts before it's lost.

Building Incident Timeline with Timesketch

mukul975

Collaboratively analyze forensic timelines for incident investigations.

Implementing Velociraptor for IR Collection

mukul975

Streamline endpoint forensic artifact collection for incident response.

Hunting EVTX with Chainsaw

mukul975

Rapidly analyze Windows event logs for threats.

Analyzing Windows Amcache Artifacts

mukul975

Extract and analyze program execution data from Windows Amcache.

Memory Forensics with Volatility

mukul975

Analyze RAM dumps for malware and process injection evidence.