Objective 1
This project demonstrated the use of Volatility Workbench to perform memory forensics by analyzing volatile memory, identifying running processes, and examining system artifacts from multiple operating systems. It highlighted the importance of memory analysis in digital investigations by showing how forensic tools can assist with incident response, malware detection, and the collection of critical evidence from live systems.
This project investigated security misconfiguration vulnerabilities within the OWASP Juice Shop application by analyzing the Error Handling and Deprecated Interface challenges to understand how application weaknesses can impact confidentiality, integrity, and availability. It also demonstrated the importance of documenting forensic findings, mapping attacker techniques to the MITRE ATT&CK Framework, and recommending mitigation strategies to support effective incident response and digital investigations.
Objective 2
This project used Autopsy to analyze digital evidence recovered from a damaged laptop, verify forensic artifacts, identify file system information, and document findings using proper evidence handling procedures. The investigation demonstrated the importance of forensic tools, evidence integrity, and thorough documentation while recovering hidden information that contributed to solving a simulated criminal investigation.
This project demonstrated the creation of a forensic image using FTK Imager while verifying evidence integrity through hash value comparison and documenting the imaging process. It reinforced the importance of proper evidence acquisition, file metadata analysis, and maintaining forensic accuracy to ensure digital evidence remains reliable throughout an investigation.
Objective 3
This project analyzed malware behavior within a controlled environment by identifying indicators of compromise, examining persistence mechanisms, and evaluating how the malware affected system performance and security. The investigation also documented mitigation strategies and incident response recommendations, demonstrating the importance of forensic analysis in identifying, containing, and preventing malware infections.
This project used the Metasploit Framework to exploit a vulnerable Windows system in a controlled TryHackMe environment, demonstrating how attackers gain initial access and compromise a target. The exercise reinforced the importance of understanding exploitation techniques, documenting findings, and applying mitigation strategies to support forensic investigations and incident response.
Objective 4
This project demonstrated the use of cryptographic hashing to verify the integrity of digital evidence by comparing hash values before and after modifying a file. The lab reinforced the importance of evidence validation and documentation, showing how forensic investigators use hash verification to ensure digital evidence remains authentic and legally admissible throughout an investigation
This report examined the legal and investigative principles of digital forensics, including evidence preservation, chain of custody, electronic discovery, litigation, and corporate investigations. It emphasized the importance of following accepted forensic procedures, maintaining evidence integrity, and producing objective documentation to ensure digital evidence remains reliable and legally admissible throughout an investigation.
Objective 5
This project utilized Volatility Workbench to preserve and analyze volatile memory from Windows, Linux, and macOS systems using industry-standard forensic techniques. The investigation demonstrated the use of advanced forensic tools to collect, examine, and preserve digital evidence while maintaining the integrity of memory artifacts for further analysis.
This project utilized industry-standard forensic tools, including FTK and Autopsy, to examine digital evidence recovered from a damaged laptop, verify evidence integrity, and analyze file systems and forensic artifacts. The investigation demonstrated the application of forensic methodologies for preserving, examining, and documenting digital evidence while maintaining the integrity and reliability of the investigative process.
This project demonstrated the use of FTK Imager to create a forensic image while following proper evidence acquisition and preservation procedures used in digital investigations. It reinforced the importance of using industry-standard forensic tools to produce accurate copies of digital evidence, ensuring its integrity and reliability for future analysis.
Objective 6
This comprehensive report documented the investigation of multiple vulnerabilities within the OWASP Juice Shop application, detailing the tools, techniques, and methodologies used to identify, analyze, and mitigate each security issue. The project demonstrated the importance of maintaining organized documentation, tracking digital evidence, and producing professional reports that clearly communicate investigative findings and support future incident response efforts.
This project documented the forensic examination of digital evidence recovered from a damaged laptop using FTK and Autopsy, while recording findings through formal evidence forms and investigative reports. The investigation emphasized accurate evidence tracking, documentation, and professional reporting practices to maintain a clear chain of evidence and support the overall forensic investigation.