วีดีโอ

Hi All, I hope you enjoy my videos. Could I ask you to support my channel by sharing my videos to help it grow? Don't forget to like and subscribe. Also, if you'd like me to create a new video on any topic related to cyber security and digital forensics, just let me know.

Hi All, I hope you enjoy my videos. Could I ask you to support my channel by sharing my videos to help it grow? Don't forget to like and subscribe. Also, if you'd like me to create a new video on any topic related to cyber security and digital forensics, just let me know.

Hi All, I hope you enjoy my videos. Could I ask you to support my channel by sharing my videos to help it grow? Don't forget to like and subscribe. Also, if you'd like me to create a new video on any topic related to cyber security and digital forensics, just let me know.

Hey! Thank you for the video, i wanna see more stuff on file carving, GPT analysis and extended partition analysis. I am actually just getting starting into forensics and found your video really helpful to understand the structure of DOS|MBR partitioned drives, furthermore i have downloaded the raw disk images you mentioned and have examined the second partition entry metadata. 1- first byte set to 0x00 indicating this as non-bootable partition 2- partition type value to 0x07, indicating NTFS partition(FS type is NTFS) 3- starting LBA address -> 0x32800 = 206,848 -> starting in-file offset -> 0x6500000 4-size of the partition in sectors 0x27CD000 -> size of the partition in bytes 21367881728 =~21GB

Is this just for USB or also for SSDs connected via SATA?

Thank you !

Are you all delusional, guidelines are legally pointless. If your company uses Cellebrite you have no idea what it's doing to achieve the extraction, you would know what they tell you its doing that's all if you knew you wouldnt be using cellebrite

Yet you don't have the source code for the program that get used how do you meticulously document actions in programs that you don't know what they're actually doing

This is helpful, thank you.

Great review to the Guide to Computer Forensics and Investigations book!

how to get the memory dump in other drive/harddisk if its not running in its OS

Hi Can you explain how to export Web browsers history via Encase or FTK?. Best Regards

Very helpfull

Thanks

hi, how to install the module netscan?

I have created memory dump of the Kali Linux version 6.8.11 -amd 64 using avml command but the volatility 3 is not showing results it shows (Unsatisfied requirement plugins. Bash. kernel ,A translation layer requirement was not fulfilled,A symbol table requirement was not fulfilled) Please Help.

Hey, how can i import all rules using suricata.yaml, i mean under rule-file:

Sir, I followed your instruction.. Getting a RAM dump file that contains the complete content of the target jpeg file was impossible for me. I was able to locate the jpeg file searching a jpeg standard header (signature) and the target jpeg file's metadata (camera company). However, the RAM dump file only had jpeg header, not the entire content. I noticed that my jpeg file content was segmented everywhere in RAM and was impossible to retrieve.... Can I ask how did you capture the RAM to begin with? For me, what I did was basically opening the Jpeg file right before capturing RAM. I used Magnet Ram Capture

Thank you

Amazing instructor ♥

helpful

You know actually. You know how to teach and educate.. lots of love for you

ty very much

Thank you very much sir from Chile, could you recommend a cheap USB write block? I am starting out in the forensic world and I don't have much money to start my tests.

I don’t have casses file when I browse so what’s the problem sir?

good explanation. I prefer the Active Disk Editor for MBR analysis, because of the templates and color segmentation.

ntfs

hello there ,thank you ,but i have an issue that when i type windows.info it does not work

Must i have a case scenario?

Great

Doesn't work

Thank You my bro So we Could Restore or Recover all this Data from a turned off ram, yes? or it's about an at time running RAM?

❤❤

Very nice information

Needed this to help with a school presentation. Thanks!

thank you ,this helped me a lot

How can I use moddump command, mine does not have. I have watched your video on installation, still not working. i have windows file in symbols too.

I guess that person is going to get arrested because they wanted broccoli

Very well explained. Thank you very much.

Hello, How can I get UUID of a device from its memory dump? I have looked everywhere but could not find it. It would be great to receive a help.. Thank you.

I really liked your explanation. you have a very rich information

Thank you for giving a very powerful information and learn use how use the digital forensics tools in a powerful and professional.

Grep and a kali box makes you what?

Extremely good content

i dont really understand this or why youtube recommended it to me at 4am (can’t sleep) but I guess I found a new cool thing to learn

Please consider sharing my videos. Recover word document docx from Network Traffic using Wireshark | An investigation into Ann Bad AIM th-cam.com/video/T193mUn5a2I/w-d-xo.htmlsi=P6O1kOjSthS5Idp7 Searching All Areas of the Digital Forensic Image for Deleted Text Using Linux Commands Grep | XXD th-cam.com/video/dDgnU_o2lYA/w-d-xo.htmlsi=-CTJbCKrLKrZxbmU Digital Forensic Report Template | Expert Witness Report Template th-cam.com/video/9P4UlI4cLJ4/w-d-xo.htmlsi=T4XDigEELPy2yfIT Digital Forensic Investigation Case in OpenText EnCase 23 | Part 1 How to add evidence files th-cam.com/video/YyHYygkbPQ8/w-d-xo.htmlsi=q59JBrjEGLwgshg6 Discover Cybersecurity Degree in the UK 2024 | Uncover the Secrets to Choosing the Right University th-cam.com/video/SCSpCXrAXn8/w-d-xo.htmlsi=41d88KT96uq33baZ How to Write Project Proposal using ChatGPT for UG, MSc, and PhD | Full Tutorial th-cam.com/video/kw2hX0Xla1w/w-d-xo.htmlsi=73opdAdCAIYK-usN Penetration Testing & Ethical Hacking | XMAS scan Vs SYN scan | Understand them U Nmap and WireShark th-cam.com/video/LIcyExXpLhY/w-d-xo.htmlsi=KmCz4S0LR7bbyCMY How to get network connection information ( telnet ) from RAM memory? Using volatility 3. Password ? th-cam.com/video/Nh9H3qQ8wBY/w-d-xo.htmlsi=KEl-f18o3WlgQpsL How to make a Forensic Image with FTK Imager | Forensic Acquisition in Windows | Physical Disk Image th-cam.com/video/8fJWQilA9U8/w-d-xo.htmlsi=SMN-RP7m4rjdPVM9 Live Forensic RAM analysis Windows 10 - FTK Imager - Extract and recover jpeg picture file from RAM. th-cam.com/video/v7HdicjMtPU/w-d-xo.htmlsi=CgY4QNAij1FPtuAI

Please consider sharing my videos. Recover word document docx from Network Traffic using Wireshark | An investigation into Ann Bad AIM th-cam.com/video/T193mUn5a2I/w-d-xo.htmlsi=P6O1kOjSthS5Idp7 Searching All Areas of the Digital Forensic Image for Deleted Text Using Linux Commands Grep | XXD th-cam.com/video/dDgnU_o2lYA/w-d-xo.htmlsi=-CTJbCKrLKrZxbmU Digital Forensic Report Template | Expert Witness Report Template th-cam.com/video/9P4UlI4cLJ4/w-d-xo.htmlsi=T4XDigEELPy2yfIT Digital Forensic Investigation Case in OpenText EnCase 23 | Part 1 How to add evidence files th-cam.com/video/YyHYygkbPQ8/w-d-xo.htmlsi=q59JBrjEGLwgshg6 Discover Cybersecurity Degree in the UK 2024 | Uncover the Secrets to Choosing the Right University th-cam.com/video/SCSpCXrAXn8/w-d-xo.htmlsi=41d88KT96uq33baZ How to Write Project Proposal using ChatGPT for UG, MSc, and PhD | Full Tutorial th-cam.com/video/kw2hX0Xla1w/w-d-xo.htmlsi=73opdAdCAIYK-usN Penetration Testing & Ethical Hacking | XMAS scan Vs SYN scan | Understand them U Nmap and WireShark th-cam.com/video/LIcyExXpLhY/w-d-xo.htmlsi=KmCz4S0LR7bbyCMY How to get network connection information ( telnet ) from RAM memory? Using volatility 3. Password ? th-cam.com/video/Nh9H3qQ8wBY/w-d-xo.htmlsi=KEl-f18o3WlgQpsL How to make a Forensic Image with FTK Imager | Forensic Acquisition in Windows | Physical Disk Image th-cam.com/video/8fJWQilA9U8/w-d-xo.htmlsi=SMN-RP7m4rjdPVM9 Live Forensic RAM analysis Windows 10 - FTK Imager - Extract and recover jpeg picture file from RAM. th-cam.com/video/v7HdicjMtPU/w-d-xo.htmlsi=CgY4QNAij1FPtuAI

Please consider sharing my videos. Recover word document docx from Network Traffic using Wireshark | An investigation into Ann Bad AIM th-cam.com/video/T193mUn5a2I/w-d-xo.htmlsi=P6O1kOjSthS5Idp7 Searching All Areas of the Digital Forensic Image for Deleted Text Using Linux Commands Grep | XXD th-cam.com/video/dDgnU_o2lYA/w-d-xo.htmlsi=-CTJbCKrLKrZxbmU Digital Forensic Report Template | Expert Witness Report Template th-cam.com/video/9P4UlI4cLJ4/w-d-xo.htmlsi=T4XDigEELPy2yfIT Digital Forensic Investigation Case in OpenText EnCase 23 | Part 1 How to add evidence files th-cam.com/video/YyHYygkbPQ8/w-d-xo.htmlsi=q59JBrjEGLwgshg6 Discover Cybersecurity Degree in the UK 2024 | Uncover the Secrets to Choosing the Right University th-cam.com/video/SCSpCXrAXn8/w-d-xo.htmlsi=41d88KT96uq33baZ How to Write Project Proposal using ChatGPT for UG, MSc, and PhD | Full Tutorial th-cam.com/video/kw2hX0Xla1w/w-d-xo.htmlsi=73opdAdCAIYK-usN Penetration Testing & Ethical Hacking | XMAS scan Vs SYN scan | Understand them U Nmap and WireShark th-cam.com/video/LIcyExXpLhY/w-d-xo.htmlsi=KmCz4S0LR7bbyCMY How to get network connection information ( telnet ) from RAM memory? Using volatility 3. Password ? th-cam.com/video/Nh9H3qQ8wBY/w-d-xo.htmlsi=KEl-f18o3WlgQpsL How to make a Forensic Image with FTK Imager | Forensic Acquisition in Windows | Physical Disk Image th-cam.com/video/8fJWQilA9U8/w-d-xo.htmlsi=SMN-RP7m4rjdPVM9 Live Forensic RAM analysis Windows 10 - FTK Imager - Extract and recover jpeg picture file from RAM. th-cam.com/video/v7HdicjMtPU/w-d-xo.htmlsi=CgY4QNAij1FPtuAI

Please consider sharing my videos. Recover word document docx from Network Traffic using Wireshark | An investigation into Ann Bad AIM th-cam.com/video/T193mUn5a2I/w-d-xo.htmlsi=P6O1kOjSthS5Idp7 Searching All Areas of the Digital Forensic Image for Deleted Text Using Linux Commands Grep | XXD th-cam.com/video/dDgnU_o2lYA/w-d-xo.htmlsi=-CTJbCKrLKrZxbmU Digital Forensic Report Template | Expert Witness Report Template th-cam.com/video/9P4UlI4cLJ4/w-d-xo.htmlsi=T4XDigEELPy2yfIT Digital Forensic Investigation Case in OpenText EnCase 23 | Part 1 How to add evidence files th-cam.com/video/YyHYygkbPQ8/w-d-xo.htmlsi=q59JBrjEGLwgshg6 Discover Cybersecurity Degree in the UK 2024 | Uncover the Secrets to Choosing the Right University th-cam.com/video/SCSpCXrAXn8/w-d-xo.htmlsi=41d88KT96uq33baZ How to Write Project Proposal using ChatGPT for UG, MSc, and PhD | Full Tutorial th-cam.com/video/kw2hX0Xla1w/w-d-xo.htmlsi=73opdAdCAIYK-usN Penetration Testing & Ethical Hacking | XMAS scan Vs SYN scan | Understand them U Nmap and WireShark th-cam.com/video/LIcyExXpLhY/w-d-xo.htmlsi=KmCz4S0LR7bbyCMY How to get network connection information ( telnet ) from RAM memory? Using volatility 3. Password ? th-cam.com/video/Nh9H3qQ8wBY/w-d-xo.htmlsi=KEl-f18o3WlgQpsL How to make a Forensic Image with FTK Imager | Forensic Acquisition in Windows | Physical Disk Image th-cam.com/video/8fJWQilA9U8/w-d-xo.htmlsi=SMN-RP7m4rjdPVM9 Live Forensic RAM analysis Windows 10 - FTK Imager - Extract and recover jpeg picture file from RAM. th-cam.com/video/v7HdicjMtPU/w-d-xo.htmlsi=CgY4QNAij1FPtuAI