Forensics

• Cheatsheet
  • Mounting E01 Images
  • Mounting ISO9660
  • Setting HPA
  • Setting DCO
  • Cloning Partition Table
  • Inspecting Process Syscalls Using sysdig
  • Check for problematic I/Os
  • Tracing SUID Programs