NIST CFReDS Hacking Case
September 2026
Analyzed and hash-verified a forensic disk image to reconstruct system activity across Windows host, user, network, email, and IRC artifacts. Used FTK Imager, Autopsy, Registry Explorer, and Wireshark to correlate evidence and build an investigation timeline, with structured notes documenting findings and limitations.
Read the forensic case study ↗