DF/IR Lemonade

Digital forensics and incident response are too often taught like a parts catalog. One module on log analysis. A class on memory forensics. A blog post on timeline creation. A YouTube video on parsing registry hives. A lab on recovering deleted files...