← DIGITAL FORENSICS

THE FORENSIC VIEWING ROOM / 06 VIDEOS

Watch. Examine.
Understand.

A curated viewing room for digital investigators. Learn the method, open the companion guide and practice with a documented evidence record.

Independent educational videos from their original publishers. The year is shown on each card. YouTube loads only when you choose Watch.

6 entries
WATCH / 01

COMPUTER FORENSICS / 2022

Starting a case in Autopsy

DFIRScience · Joshua I. James

Case organization, evidence processing, analysis workflow and reporting in a complete introductory walkthrough.

Demonstrates an older Autopsy interface. Match controls and modules to your installed version.

WATCH / 02

MOBILE FORENSICS / 2024

Smartphone forensic analysis: the discipline

SANS Digital Forensics and Incident Response

A course overview introducing the scope and interpretation skills involved in smartphone examination.

A course overview, not a device acquisition walkthrough. Pair it with the mobile guides below.

WATCH / 03

MALWARE ANALYSIS / 2018

Introduction to malware analysis

SANS Institute · Lenny Zeltser

A foundational lecture explaining static and behavioral analysis and the questions each can answer.

An archived foundations lecture. Our companion exercise uses harmless files and static examination.

WATCH / 04

EVIDENCE ACQUISITION / 2020

The foundations of evidence acquisition

DFIRScience · Joshua I. James

Understand the purpose of a forensic image and the questions to consider before collecting storage evidence.

Foundational method; current hardware and encryption can change the appropriate acquisition approach.

WATCH / 05

MEMORY FORENSICS / 2020

RAM acquisition and analysis: why memory matters

DFIRScience · Joshua I. James

An introduction to volatile memory and its role in a digital investigation.

A conceptual introduction. Memory is a time-specific source, not a complete incident history.

WATCH / 06

FORENSIC REPORTING / 2020

Documenting and reporting an investigation

DFIRScience · Joshua I. James

Connect the evidence record to clear findings that a second examiner or decision-maker can review.

Focus on traceability and clear reporting. Use the downloadable case worksheet to practice.

Search the lab

NEWS / FORENSICS / FIELD GUIDES ESC

Forensic viewing room

Video unavailable or embedding restricted?

Watch on YouTube ↗