{"id":13797355,"url":"https://github.com/kanglib/edu_for","last_synced_at":"2026-02-07T05:05:28.334Z","repository":{"id":90226108,"uuid":"95767598","full_name":"kanglib/edu_for","owner":"kanglib","description":"A cheat sheet for digital forensics :blush:","archived":false,"fork":false,"pushed_at":"2017-08-28T09:45:13.000Z","size":45,"stargazers_count":4,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"master","last_synced_at":"2024-11-18T11:41:03.020Z","etag":null,"topics":["digital-forensics","forensics"],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kanglib.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-06-29T10:41:25.000Z","updated_at":"2022-09-06T14:39:39.000Z","dependencies_parsed_at":null,"dependency_job_id":"5ae312ba-1a8f-4744-8f3a-1f9341b1714a","html_url":"https://github.com/kanglib/edu_for","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kanglib%2Fedu_for","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kanglib%2Fedu_for/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kanglib%2Fedu_for/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kanglib%2Fedu_for/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kanglib","download_url":"https://codeload.github.com/kanglib/edu_for/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253859781,"owners_count":21975174,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["digital-forensics","forensics"],"created_at":"2024-08-03T23:01:28.464Z","updated_at":"2026-02-07T05:05:28.281Z","avatar_url":"https://github.com/kanglib.png","language":null,"funding_links":[],"categories":["\u003ca id=\"8c5a692b5d26527ef346687e047c5c21\"\u003e\u003c/a\u003e收集","\u003ca id=\"601dcc03dc2254612e1b88816ae2b820\"\u003e\u003c/a\u003e资源收集"],"sub_categories":[],"readme":"# edu_for\nA cheat sheet for digital forensics :blush:\n\n## Memory forensics w/ Volatility\n* [Download](http://www.volatilityfoundation.org/releases)  \n* [Command reference](https://github.com/volatilityfoundation/volatility/wiki/Command-Reference)  \n* Malware Triage\n#### Exercises\n* Where is Malware?\n* Memory_easy\n* Infected Memory\n\n## File system forensics\n### MBR\n* [MBR structure](https://en.wikipedia.org/wiki/Master_boot_record)  \n* [Partition types](https://en.wikipedia.org/wiki/Partition_type)  \n* [MBR examination](http://thestarman.pcministry.com/asm/mbr/STDMBR.htm)\n\n### FAT\n* [Specification](http://download.microsoft.com/download/1/6/1/161ba512-40e2-4cc9-843a-923143f3456c/fatgen103.doc)  \n* [FAT on NTFS.com](http://www.ntfs.com/fat-systems.htm)  \n* [FAT volume structure](http://thestarman.pcministry.com/asm/mbr/MSWIN41.htm)\n#### Exercises\n* [Saturated FAT](https://github.com/kanglib/edu_for/raw/master/saturated.zip)\n\n### NTFS\n\n### HFS+\n\n### Android\n\n## Further reading\n* [Deus ex machina](https://lmgtfy.com/)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkanglib%2Fedu_for","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkanglib%2Fedu_for","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkanglib%2Fedu_for/lists"}