Build Your First Cyber Forensic Application using Python
summary
Claims a CheckPoint Research spike to 150,000+ attacks per week and a 30% rise during COVID‑19, outlines the six forensic steps (identification, collection, validation, examination, preservation, presentation), and demonstrates a python prototype that indexes files with Whoosh, extracts EXIF/GPS via Pillow, captures screenshots with pyscreenshot, and validates clones using hashlib digests. Code walkthroughs and screenshots exist though live demo is skipped; shows practical commands, libraries, and expected digest comparisons.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 2:26Agenda overview
- 3:22Cyber crime statistics
- 4:49Defining digital forensics
- 6:48Forensic investigation steps
- 9:13Legal standards and admissibility
- 10:30Python and Daubert compliance
- 12:10Setting up the environment
- 13:56Built-in functions and modules
- 15:14Indexing and searching
- 17:46Hash functions for validation
- 19:05Evidence extraction tools
- 22:29Metadata forensics
- 25:47Natural language tools
- 28:18Summary and Q&A
related talks
28mBuild your first Cyber Forensic Application
37mMaking your network ready for Cyber Forensics Analysis
22mMalware Hunting - Using python as an attack weapon
29mHow to Spy with Python
30mPython Platforms for Cyber Security
28m"Cyber Security Investigations with Jupyter Notebooks"
32mExplore Adventures in the Underland: Forensic Techniques against Hackers
53mForensic Investigations of Web Exploitations