Digital Forensics Notes¶
Course notes for digital investigation, forensic tools, memory and mobile forensics.
Author: Meenakshi S L
Quick links¶
| Section | Pages |
|---|---|
| Investigation | Process |
| Data acquisition | PC · Mobile · PC vs mobile |
| Tools | Capture · Autopsy modules · Windows registry |
| Memory forensics | Overview · Volatility |
| Mobile forensics | Workflow · Acquisition types · Challenges · Hardware |
| Android | Artifacts · Architecture · Boot · RE · OWASP |
| Other | iOS · Drones · OS artifacts |
| Case studies | AI Trust — Gemini CLI · Insider theft · Dark web |
Featured case study¶
Supply-chain and AI agent risk
See AI Trust Danger: Gemini CLI for prompt injection, workspace trust bypasses, and fake CLI distribution.
Evidence Integrity
Always work from forensic copies. Hash before and after imaging where the platform allows verified integrity.
Chain of Custody
Every transfer of evidence must be logged with date, time, handler identity, and purpose.