Forensic Process Lifecycle

Forensic lifecycle - DRAFT. This is not meant to be inclusive of every step or technique, but it was meant to provide a basic framework for teaching purposes. Feel free to comment below. (if the pdf does not display correctly, you can view it directly here).

Windows 8 is coming....

Some good reading to get started (props to the researchers):

http://propellerheadforensics.files.wordpress.com/2012/05/thomson_windows-8-forensic-guide2.pdf

http://computerforensics.champlain.edu/blog/windows-8-forensics

http://dfstream.blogspot.com/2012/05/windows-8-typedurlstime.html

https://www.sans.org/webcasts/windows-8-forensics-filehistory-service-95325

http://randomthoughtsofforensics.blogspot.com/2011/12/windows-8-forensic-overview.html

Welcome back!

I wanted to write a quick post and say it was great to see so many people at CEIC this year. I have not been to CEIC the past few years, but it was great to see so many familiar faces.

I also wanted to thank so many of you that have emailed me to provide positive comments and encourage me to start posting on the blog again. I appreciate everyone's support and positive feedback.

After taking almost a year off from the blog I am ready to get back at it! I will begin posting new EnScripts and other articles that I find useful.

Thanks.