Video Description

This lab-based lesson offers step by step instructions in how to navigate the H drive on the computer to hash files in order to produce a result which can be exported to a notepad. This preserves the integrity of a file and allows an investigator to gather volatile information. This lesson also covers the use of Mandiant Redline, which allows the collection of volatile memory and analysis.

Course Modules

Incident Response & Advanced Forensics