Investigating a Malicious File Download with FTK Imager: Browser History Analysis, UserAssist Artifacts, Windows Mail Forensics, and PowerShell Deobfuscation
Investigating Suspicious NTLM Authentication with Wireshark and Windows Event Logs: SMB Traffic Analysis, Hostname Mismatch Detection, and Log Correlation
Investigating a Shellshock Attack from a PCAP File with Wireshark
Analyzing HTTP Basic Authentication from a PCAP File with Wireshark and CyberChef
Investigating a Missing Person with OSINT: Reverse Image Search, EXIF Metadata Analysis, and Social Media Correlation
