references.md

References – Intro to DFIR: Divide & Conquer

📚 Official Resources

• Sleuth Kit: https://sleuthkit.org/
• Autopsy: https://www.autopsy.com/
• Sleuth Kit GitHub: https://github.com/sleuthkit/sleuthkit
• Autopsy GitHub: https://github.com/sleuthkit/autopsy

📑 Standard Documentation

• NIST SP 800-61: Computer Security Incident Handling Guide
• NIST SP 800-86: Guide to Integrating Forensics Techniques
• NIST SP 1800 Series — Forensics Use Cases

🔍 Digital Forensics Tools

• fls, icat, tsk_recover, mmls, fsstat
• Volatility Framework
• Plaso (log2timeline)
• X-Ways Forensics
• KAPE (Kroll)

📝 Learning Resources

• DFIR Training – https://dfir.training/
• Digital Forensics Discord communities
• SANS Digital Forensics Curriculum

📘 Books

• File System Forensic Analysis — Brian Carrier
• Digital Forensics and Incident Response — Jason Luttgens
• The Art of Memory Forensics — Ligh et al.