diff --git a/FSCS727_Forensics/Labs/Volatile_Memory_Forensics/VolatilityCheatSheet.pdf b/FSCS727_Forensics/Labs/Volatile_Memory_Forensics/VolatilityCheatSheet.pdf new file mode 100644 index 0000000..dec8e4a Binary files /dev/null and b/FSCS727_Forensics/Labs/Volatile_Memory_Forensics/VolatilityCheatSheet.pdf differ diff --git a/FSCS727_Forensics/Labs/Volatile_Memory_Forensics/Window_memory_forensics_lab.pptx b/FSCS727_Forensics/Labs/Volatile_Memory_Forensics/Window_memory_forensics_lab.pptx new file mode 100644 index 0000000..2b08818 Binary files /dev/null and b/FSCS727_Forensics/Labs/Volatile_Memory_Forensics/Window_memory_forensics_lab.pptx differ