Disk Analysis with Autopsy | HackerSploit Blue Team Training

preview_player
Показать описание
Continuing our Blue Team Training series, @HackerSploit will cover using the tool Autopsy® for disk analysis. Autopsy is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It is used by law enforcement, military, and corporate examiners to investigate what happened on a computer.

Chapters:
0:00 Introduction
0:32 What We Will Be Covering
1:19 Prerequisites
1:32 Introduction to Disk Forensics
3:56 Introduction to Autopsy
6:04 Learning Resources
6:30 Practical Demo
7:00 Where to Download Autopsy
8:34 Obtain FTK Imager
9:00 Get Started with FTK Imager
12:30 How to use CFReDS
15:10 Creating a New Case in Autopsy
22:00 Overview of Data Sources
26:00 Overview of Views
35:19 Overview of Data Artifacts
40:52 Analysis Result in Autopsy
42:34 Overview of OS Accounts
43:20 Overview of Tags in Autopsy
43:48 Exporting Files or Information in Autopsy
44:50 Managing the Timeline in Autopsy
51:30 Conclusion

#BlueTeam #cybersecurity #hackersploit
Product: Linode, Blue Team, Autopsy Linux, Hackersploit, ; @HackerSploit
Рекомендации по теме
Комментарии
Автор

When i choose data source, i can only see "unallocated" entities, i dont have directories listed like you do

vedro
Автор

thank you, this video is really helpful!

Novoselova.Polina
Автор

Hello Akamai, your dem-video is very informative. Your step by step guide was on point and explanatory process too. I really would like to see more demo-videos on Disk Analysis also with other similar/pro tools like autopsy etc. I hope to get a feedback from you as I have also subscribed to your channel. Keep it the good work and keep it coming. Thanks!

luigigarella