What you need for this book

The following software is required for this book:

  • EnCase Imager
  • F-Response
  • Rekal
  • Madiant Redline
  • Autopsy
  • Wireshark
  • tcpdump
  • Volatility
  • Security Onion
  • FTK Imager
  • Winpmem
  • Eraser
  • CAINE OS, a Linux distribution for forensics purposes
  • Xplico and CapAnalysis
  • ELK stack
  • Fast Incident Response (FIR) platform
  • Pestudio
  • Remnux
  • Cuckoo Sandbox
  • Yara and Loki

The hardware and system requirements for these can be found at there respective websites. Most of this softwares are free, but F-Response is paid.

Get Digital Forensics and Incident Response now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.