add readme

This commit is contained in:
Frank Xu
2021-01-10 22:30:54 -05:00
parent 3affd1e383
commit 3ba54e626a
2 changed files with 28 additions and 2 deletions

View File

@@ -1,17 +1,43 @@
# Digital Forensics Lab
Free Hands-on Digital Forensics Labs for Students and Faculty
---
## Table of Contents (updating)
- [NIST Data Leakage](#Nist%20Data%20Leakage)
- [Email Harassment](#Email%20Harassment)
- [Illegel Image Possesion](#Illegel%20Image%20Possesion)
---
### NISTst Data Leakage
The case study is to investigate an image involving intellectual property theft. The study include
### Nist Data Leakage
The forensic case study is to investigate an image involving intellectual property theft. The study include
* A large and complex image created by [NIST](https://www.cfreds.nist.gov/data_leakage_case/data-leakage-case.html)
* 13 hands-on labs/topics in digital forensics
* Each lab has an PPT with lab screenshots
The list of tools used
* Wine
* https://github.com/AtesComp/Vinetto
* https://github.com/Arthelon/imgclip
* Tree (apt-get install tree)
* https://github.com/keydet89/RegRipper3.0
* https://github.com/PoorBillionaire/Windows-Prefetch-Parser.git
* apt-get install python3-evtx
* apt-get install xmlstarlet
* apt-get install libhivex-bin
* apt-get install libesedb-utils
* apt-get install pasco
* https://github.com/libyal/libpff apt-get install pff-tools
* pip install usncarve
* pip install usnparser
* JLECmd wget https://f001.backblazeb2.com/file/EricZimmermanTools/JLECmd.zip
* apt-get install liblink-tuils
* https://github.com/digitalsleuth/time_decode
* pip install analyzeMFT
* https://github.com/libyal/libvshadow
* https://github.com/prolsen/recentfilecache-parser
---
#### Email Harassment
---
#### Illegel Image Possesion

Binary file not shown.