07 - References & Resources

Official Guidelines

• NIST SP 800-86: Guide to Integrating Forensic Techniques into Incident Response - The foundational document for digital forensics methodologies.

Documentation

• Volatility 3 Documentation: https://volatility3.readthedocs.io/
• SQLite Documentation: https://www.sqlite.org/docs.html

Cheat Sheets

• SANS DFIR Cheat Sheets: https://www.sans.org/posters/
• FOR508 (Advanced Incident Response): Memory forensics and timeline analysis resources.

Tools

• FTK Imager (AccessData)
• Autopsy Digital Forensics
• WinPmem