> For the complete documentation index, see [llms.txt](https://notes.nomanaziz.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response.md).

# Digital Forensics & Incidence Response

- [Memory Acquisition with LIME](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/memory-acquisition-with-lime.md)
- [Disk Analysis with Autopsy](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/disk-analysis-with-autopsy.md)
- [Data and Memory Collection with FireEye Redline](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/data-and-memory-collection-with-fireeye-redline.md)
- [Memory Forensice with Volatility](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/memory-forensice-with-volatility.md)