SIFT Cheat Sheet

Forensic analysts serve on the front lines of computer investigations. This guide aims to support DFIR analysts in their quest to uncover the truth. This cheat sheet is intended to be used as a reference for important forensics tools and techniques available using the SANS Linux SIFT Workstation. Topics covered include mounting evidence, recovering data, timeline creation, and detailed file system analysis. This broad reference guide also serves as a reminder of the many Linux-based digital forensics and incident response capabilities available.

July 8, 2024

Related Content

DFIR - Blog - Defending Against SCATTERED SPIDER and The Com with Cybercrime Intelligence_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Defending Against SCATTERED SPIDER and The Com with Cybercrime Intelligence

Due to the notoriety SCATTERED SPIDER and The Com have attracted as prolific cybercriminal threats, law enforcement has been tracking them closely.

DFIR - Blog - The Importance of Cyber Threat Intelligence- Insights from Recent Nobelium Attacks_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

The Importance of Cyber Threat Intelligence: Insights from Recent Nobelium Attacks

The persistent and sophisticated attacks by Nobelium highlight the critical role of cyber threat intelligence.

DFIR_ICON_(1).PNG

ics blog image.png

Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting

A Visual Summary of SANS ICS Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS ICS Security Summit 2024