This repository contains a comprehensive forensic report based on the digital analysis of a realistic data leakage case.
A rigorous methodology was applied using specialized tools (mainly Autopsy, along with supporting utilities) to recover, analyze, and present digital evidence.
- Final Forensic Report (PDF):
A detailed document presenting findings, chronological analysis, and objective conclusions. - Technical Annexes:
Evidence, complete timeline, configurations, and relevant digital artifacts. - Supplementary Documentation:
Additional information that, while not included in the final report, provides valuable context to the investigation.
- Autopsy: forensic image analysis, email extraction, browsing history, timeline.
- RegRipper: registry keys extraction (MRU, timezone, RDP configuration).
- EvtxECmd: security event log analysis (logins, remote access).
- FTK Imager: forensic acquisition of disks (write-blocked imaging).
- Others: strings, cat, hiberfil.sys and pagefile.sys analysis, Chrome plugins, etc.
- Forensic methodology aligned with chain of custody principles and respect for fundamental rights.
- Key Evidence:
- Sensitive document transfer from USB and internal network.
- Use of Google Drive for data exfiltration.
- Remote access via RDP and Chrome Remote Desktop.
- Resignation letter found on the desktop, correlated with the suspicious activity timeline.
- Objective analysis and evidence-based conclusions.
This work combines digital forensic techniques with a clear and educational approach, making it ideal for students, professionals, and enthusiasts who want to learn about:
- Digital investigation methodologies.
- Real forensic tools.
- Drafting strong forensic reports usable in judicial contexts.
[Dragos Cornel] – Digital Forensics Analyst with a background in IT, philosophy, and arts.
This project showcases the ability to integrate critical thinking and technical expertise in complex investigations.
This repository is shared for educational and demonstrative purposes.
It contains no real personal data and does not violate third-party rights.
🚀 Explore the report, learn from the methodology, and if you find this project interesting, don’t hesitate to give it a star ⭐ or reach out for collaborations.