[Forensics] To do list

[Dylouwu]

Memory analysis

• Testdisk/photorec
• Volatility 3 (for newer OSes)
• Autopsy
• libewf

Web tools

• Hybrid analysis

Essential commands

Examples :

ausearch -x /usr/bin/curl

sudo grep -E 'sudo|python3.7|pip|wget|curl' /var/log/audit/audit.log