cat/forensicsexplore forensics tools →
Forensics
// 3 published field manuals
Forensics challenges hand you an artifact — a pcap, a disk image, a memory dump — and ask you to recover what happened or what was hidden inside.
› field manual articles
- 01beginner
File Analysis Fundamentals
Identify mystery files, find hidden data in metadata, and extract embedded archives from any forensics challenge.
- 02beginner
PCAP Analysis
Read network captures in Wireshark, follow streams, and extract files and credentials from captured traffic.
- 03intermediate
Memory Forensics with Volatility
Extract processes, network connections, files, and credentials from a raw memory dump using Volatility.