SIFT Cheat Sheet

Forensic analysts serve on the front lines of computer investigations. This guide aims to support DFIR analysts in their quest to uncover the truth. This cheat sheet is intended to be used as a reference for important forensics tools and techniques available using the SANS Linux SIFT Workstation. Topics covered include mounting evidence, recovering data, timeline creation, and detailed file system analysis. This broad reference guide also serves as a reminder of the many Linux-based digital forensics and incident response capabilities available.

July 8, 2024

Related Content

DFIR - Blog - A Prescription for Windows Prefetch Analysis_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

December 18, 2024

A Prescription for Windows Prefetch Analysis

The latest Siftgrab update includes a new function that generates several preformatted Excel workbooks.

Coolest Careers Poster

Digital Forensics, Incident Response & Threat Hunting

SANSがおすすめするサイバーセキュリティの仕事20選: サイバーセキュリティアナリスト/エンジニア

サイバーセキュリティアナリスト/エンジニアの主な業務や、スキルアップのためのSANSのおすすめのコースを紹介します！

Blog_teaser_images_(5).png

Digital Forensics, Incident Response & Threat Hunting

February 7, 2022

SANS DFIR Course Roadmap and Job Role Matrix

Here is our suggested Course Roadmap to guide you in your search for training. Use the Job Role Matrix to match a course with common job roles in DFIR