Hard Disk Image Forensics and Analysis with Autopsy | TryHackMe | Computer Forensics

preview_player
Показать описание
In this video walkthrough, we covered Disk analysis and forensics using Autopsy. We extracted forensic artifacts about the operating system and uses.
#forensics
#autopsy
*****
Receive Cyber Security Field, Certifications Notes and Special Training Videos
******
Writeup
TryHackMe Disk Analysis & Autopsy
****
Patreon
Instagram
Twitter
Facebook
LinkedIn
Website
Backup channel
My Movie channel:
******
Рекомендации по теме
Комментарии
Автор

I don't know why, but when looking at SOFTWARE under Operating System Information, the Application tab is greyed out and I can't view the registry. What do I do?

UPDATE: I just had to close and reopen Autopsy and it was working again.

angeltazdevil
Автор

Hi Motasesm...for the last question...Recommend to add in the video google about MS-NRPC exploit which helps in finding the exploit name thereby easing the search...just an advice

ian
Автор

Well the wallpaper question really pissed me off. Like you I found the wallpaper but the machine does not have any image viewer and for some reason paint would not view the image even after extracting it to the desktop. There was no excuse for such an easy question to have such a hard way to access the info.

rationalbushcraft
Автор

I really like ur content bro. Keep sharing 😇😇🤘🤘

akashupadhyayawow
Автор

under operating system information, application tab was grayed out. Also how could you even see the pictures? I how blank pictures for every single one there is on this disk, there has to be some setting you didn't show, as I am not getting the same results as you are. Heck I wouldn't be here if it had worked as seamlessly on my end than yours

leblanc
Автор

Hello sir. I have a problem.The image file of the desktop wallpaper of Joshwa is not opening.Actually any of the image files are not opening. Whenever I am exporting the image file, it shows 0 kb. Please help

shreyatalukdar
Автор

While loading the disk image file as a new data source, do we need to select the ingest modules?

ian
Автор

Where can i find the image to download it like u did?

logosparanoiasofficial
Автор

is this dead analysis or live analysis??

idlanhelmy