This repo contains a step-by-step digital forensics case study using Autopsy. It walks through analysis of a sample disk image including:
- Artifact extraction
- Timeline reconstruction
- Recovered evidence
- Chain of custody documentation
Full case writeup in
forensics_case_study.md
- Autopsy
- Windows/Kali
- Sample
.ddimage
#forensics #incident-response #cybersecurity #autopsy #research