Forensics | Security Hive

Walkthrough Page

Jan 16, 2023

Azure Active Directory Incident Response Cheat Sheet: Tools and Techniques

In this cheat sheet, we'll take a look at some of the key tools and techniques that can be used to perform Azure Incident Response.

976 views0 comments

Jan 9, 2023

Uncovering the Secrets of NTFS File Records: A Digital Forensics Guide

Windows file system forensics is a vital aspect of digital forensics investigations, as it allows examiners to recover and analyze evidence.

788 views0 comments

Jul 13, 2022

MFT Journaling Forensics - Tools & Techniques

The forensic value of MFT journals is that they can be used to find evidence of file creations, deletions, renames, etc.

1,341 views0 comments

Mar 13, 2022

Analyzing Shimcache Forensics - Python Forensics #1

We are going to extract this valuable information with a well-known tool made by Eric Zimmermann, and use a python-based addon I created.

595 views0 comments

Feb 25, 2022

Browser Forensics - Tools & Techniques

The amount of information stored locally in the browser's folders is huge and can be super useful for forensic analysis.

2,816 views0 comments

Dec 23, 2021

EVTX Forensics - Investigate Windows Events

Windows event logs provide a rich source of forensic information for threat hunting and incident response investigations.

2,582 views0 comments

Dec 8, 2021

WMI Forensics - Cheat Sheet

While WMI and PowerShell can be used for attacks, they equally can be used for defense.

1,798 views0 comments

Sep 26, 2021

Linux Forensics - The Complete CheatSheet

While Windows forensics is widely covered via several courses and articles, there are fewer resources introducing it to the Linux Forensics

8,959 views0 comments

Sep 16, 2021

Execution Evidence - Prefetch Files

The Evidence of execution might be your forensic solution.

1,044 views0 comments